[RELEASED] Python 3.4.5 and Python 3.5.2 are now available

On behalf of the Python development community and the Python 3.4 and Python 3.5 release teams, I'm thrilled to announce the availability of Python 3.4.5 and Python 3.5.2.
Python 3.4 is now in "security fixes only" mode. This is the final stage of support for Python 3.4. All changes made to Python 3.4 since Python 3.4.4 should be security fixes only; conventional bug fixes are not accepted. Also, Python 3.4.5 and all future releases of Python 3.4 will only be released as source code--no official binary installers will be produced.
Python 3.5 is still in active "bug fix" mode. Python 3.5.2 contains many incremental improvements and bug fixes over Python 3.5.1.
You can find Python 3.4.5 here:
https://www.python.org/downloads/release/python-345/
And you can find Python 3.5.2 here:
https://www.python.org/downloads/release/python-352/
Releasing software from 30,000 feet,
//arry
/p.s. There appears to be a small oops with the Windows installers for 3.5.2--uploaded to the wrong directory or something. They'll be available soon, honest!

On 26Jun2016 1932, Larry Hastings wrote:
https://www.python.org/downloads/release/python-352/ ... /p.s. There appears to be a small oops with the Windows installers for 3.5.2--uploaded to the wrong directory or something. They'll be available soon, honest!
That oops is now fixed, but I wanted to mention one other thing.
Microsoft Security Essentials, now a very common antivirus/antimalware scanner on Windows, is incorrectly detecting Lib/distutils/command/wininst-14.0.exe as malware (originally reported at http://bugs.python.org/issue27383).
My assumption is that someone distributed malware using a bdist_exe package, and our stub executable got picked up in the signature. I rebuilt the executable on my own machine from early source code and it still triggered the scan, so there does not appear to have been any change to the behaviour of the executable.
I've already submitted a false positive report, so I expect an update to correct it at some point in the future, but please do not be alarmed to see this warning when installing Python 3.5.2, or when scanning any earlier version of 3.5.
Feel free to contact me off-list or steve.dower at microsoft.com if you have concerns.
Cheers, Steve

On Mon, 27 Jun 2016 08:25:40 -0700, Steve Dower <steve.dower@python.org> wrote:
On 26Jun2016 1932, Larry Hastings wrote:
https://www.python.org/downloads/release/python-352/ ... /p.s. There appears to be a small oops with the Windows installers for 3.5.2--uploaded to the wrong directory or something. They'll be available soon, honest!
I've already submitted a false positive report, so I expect an update to correct it at some point in the future, but please do not be alarmed to see this warning when installing Python 3.5.2, or when scanning any earlier version of 3.5.
Feel free to contact me off-list or steve.dower at microsoft.com if you have concerns.
Should there be a note about this on the download page(s)?
--David

Larry is welcome to add one, but I hope it won't be an issue for long. It's not actually directly related to 3.5.2 as the file in question hasn't changed (not even rebuilt).
I hoped by informing the lists we'll be able to address concerns as they come up, but I'd rather not have a semi-permanent instruction to ignore a virus scanner :)
Cheers, Steve
Top-posted from my Windows Phone
-----Original Message----- From: "R. David Murray" <rdmurray@bitdance.com> Sent: 6/27/2016 11:25 To: "python-committers" <python-committers@python.org> Subject: Re: [python-committers] [Python-Dev] [RELEASED] Python 3.4.5 andPython 3.5.2 are now available
On Mon, 27 Jun 2016 08:25:40 -0700, Steve Dower <steve.dower@python.org> wrote:
On 26Jun2016 1932, Larry Hastings wrote:
https://www.python.org/downloads/release/python-352/ ... /p.s. There appears to be a small oops with the Windows installers for 3.5.2--uploaded to the wrong directory or something. They'll be available soon, honest!
I've already submitted a false positive report, so I expect an update to correct it at some point in the future, but please do not be alarmed to see this warning when installing Python 3.5.2, or when scanning any earlier version of 3.5.
Feel free to contact me off-list or steve.dower at microsoft.com if you have concerns.
Should there be a note about this on the download page(s)?
--David
python-committers mailing list python-committers@python.org https://mail.python.org/mailman/listinfo/python-committers Code of Conduct: https://www.python.org/psf/codeofconduct/

On 06/27/2016 11:24 AM, R. David Murray wrote:
On Mon, 27 Jun 2016 08:25:40 -0700, Steve Dower <steve.dower@python.org> wrote:
On 26Jun2016 1932, Larry Hastings wrote:
https://www.python.org/downloads/release/python-352/ ... /p.s. There appears to be a small oops with the Windows installers for 3.5.2--uploaded to the wrong directory or something. They'll be available soon, honest! I've already submitted a false positive report, so I expect an update to correct it at some point in the future, but please do not be alarmed to see this warning when installing Python 3.5.2, or when scanning any earlier version of 3.5. Should there be a note about this on the download page(s)?
I've added a note.
* Windows users: Some virus scanners (most notably "Microsoft
Security Essentials") are flagging
"Lib/distutils/command/wininst-14.0.exe" as malware. This is a
"false positive": the file does not contain any malware. We build it
ourselves, from source, on a known-clean system. We've asked that
this false positive report be removed, and expect action soon. In
the meantime, please don't be alarmed to see this warning when
installing Python 3.5.2, or when scanning any earlier version of 3.5.
https://www.python.org/downloads/release/python-352/
//arry/
p.s. the "oops" was about missing files, not about the false positive for malware.

On 27Jun2016 1616, Larry Hastings wrote:
I've added a note.
* Windows users: Some virus scanners (most notably "Microsoft Security Essentials") are flagging "Lib/distutils/command/wininst-14.0.exe" as malware. This is a "false positive": the file does not contain any malware. We build it ourselves, from source, on a known-clean system. We've asked that this false positive report be removed, and expect action soon. In the meantime, please don't be alarmed to see this warning when installing Python 3.5.2, or when scanning any earlier version of 3.5. https://www.python.org/downloads/release/python-352/
FWIW, it looks like today's definition update for Security Essentials has fixed the false positive (I would've liked an acknowledgement from the submission email, but I'll settle for a fix :) ).
Given basically everyone will get the definition update fairly quickly, I don't think this is an issue any more.
Cheers, Steve
participants (3)
-
Larry Hastings
-
R. David Murray
-
Steve Dower