Re: [Python-Dev] [python-committers] Winding down 3.4

2018年8月13日 02:58:23 -0700

Le 13/08/2018 à 11:49, Larry Hastings a écrit :
> 
> 
> We of the core dev community commit to supporting Python releases for
> five years. Releases get eighteen months of active bug fixes, followed
> by three and a half years of security fixes. Python 3.4 turns 5 next
> March--at which point we'll stop supporting it, and I'll retire as 3.4
> release manager.
> 
> My plan is to make one final release on or around its fifth birthday
> containing the last round of security fixes. That's about seven months
> from now. Nothing has been merged since the releases of 3.4.9 and 3.5.6
> last week, and there are no open PRs against either of those releases.
> 
> But! There are still a couple languishing "critical" bugs:
> 
> "shutil copy* unsafe on POSIX - they preserve setuid/setgit bits"
> https://bugs.python.org/issue17180
> 
> "XML vulnerabilities in Python"
> https://bugs.python.org/issue17239
> 
> "fflush called on pointer to potentially closed file" (Windows only)
> https://bugs.python.org/issue19050
> 
> It'd be nice to resolve all those issues, one way or another, before we
> retire 3.4.
So that 3.4 dies in good health?
Regards
Antoine.
_______________________________________________
Python-Dev mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to