GitPython 3.1.30 for Python 3.6.x ?

[ykoer]

Hello,
due to the critical vulnerability, Is there a chance to get GitPython 3.1.30 for Python 3.6.x ?

Thanks
Yusuf

[Byron]

I am not sure GitPython works for python 3.6 anymore as I believe that was removed a while ago due to EOL.
You might be able to backport the relevant fixes yourself though and use a fork.

This project doesn't support backporting and re-releaseing patches for previous versions either, and any improvements in this regard need to be contributed (like everything else).

[ykoer]

I agree. Thanks

[ykoer]

@Byron , I have one last question.
Any idea why 3.1.30 is still classified as critical?
pyup.io-52322 (CVE-2022-24439)

[Byron]

To me it looks like they correctly classify v3.1.30 as patched, with the vulnerability fixed.

[ykoer]

Okay, it must be an issue with the advisory data in Quay/Clair

Thanks a lot Byron