Upcoming 3.7.10 and 3.6.13 Security Releases
We are planning to produce the next security-fix rollup releases for Python 3.7.x and 3.6.x on 2021-01-15. The most recent releases for these versions were on 2020-08-17. There has not been a lot of activity for either branch since then. Core developers: if you know of any additional security issues that should be addressed in these releases, please mark the relevant bpo issues as "release blocker" and, if possible, submit PRs for review prior to the end of 2021-01-14 AOE. Thanks! -- Ned Deily nad@python.org -- []
On 10. 01. 21 21:15, Ned Deily wrote:
We are planning to produce the next security-fix rollup releases for Python 3.7.x and 3.6.x on 2021-01-15. The most recent releases for these versions were on 2020-08-17. There has not been a lot of activity for either branch since then.
Core developers: if you know of any additional security issues that should be addressed in these releases, please mark the relevant bpo issues as "release blocker" and, if possible, submit PRs for review prior to the end of 2021-01-14 AOE.
Hi Ned. I am not a core developer, but can https://bugs.python.org/issue42938 please be included? I know it is past the deadline, but I have not seen the releases. Thanks, -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok
On 20/01/2021 13.06, Miro Hrončok wrote:
On 10. 01. 21 21:15, Ned Deily wrote:
We are planning to produce the next security-fix rollup releases for Python 3.7.x and 3.6.x on 2021-01-15. The most recent releases for these versions were on 2020-08-17. There has not been a lot of activity for either branch since then.
Core developers: if you know of any additional security issues that should be addressed in these releases, please mark the relevant bpo issues as "release blocker" and, if possible, submit PRs for review prior to the end of 2021-01-14 AOE.
Hi Ned. I am not a core developer, but can https://bugs.python.org/issue42938 please be included? I know it is past the deadline, but I have not seen the releases.
Ned has postponed the upcoming security releases for the issue. Benjamin's fix has landed two days ago. The fixes will be included in 3.7.10 and 3.6.13. Christian
On 20. 01. 21 13:43, Christian Heimes wrote:
On 20/01/2021 13.06, Miro Hrončok wrote:
On 10. 01. 21 21:15, Ned Deily wrote:
We are planning to produce the next security-fix rollup releases for Python 3.7.x and 3.6.x on 2021-01-15. The most recent releases for these versions were on 2020-08-17. There has not been a lot of activity for either branch since then.
Core developers: if you know of any additional security issues that should be addressed in these releases, please mark the relevant bpo issues as "release blocker" and, if possible, submit PRs for review prior to the end of 2021-01-14 AOE.
Hi Ned. I am not a core developer, but can https://bugs.python.org/issue42938 please be included? I know it is past the deadline, but I have not seen the releases.
Ned has postponed the upcoming security releases for the issue. Benjamin's fix has landed two days ago. The fixes will be included in 3.7.10 and 3.6.13.
Thanks! -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok
On Jan 20, 2021, at 08:17, Miro Hrončok
On 20. 01. 21 13:43, Christian Heimes wrote:
On 20/01/2021 13.06, Miro Hrončok wrote:
On 10. 01. 21 21:15, Ned Deily wrote:
We are planning to produce the next security-fix rollup releases for Python 3.7.x and 3.6.x on 2021-01-15. The most recent releases for these versions were on 2020-08-17. There has not been a lot of activity for either branch since then.
Core developers: if you know of any additional security issues that should be addressed in these releases, please mark the relevant bpo issues as "release blocker" and, if possible, submit PRs for review prior to the end of 2021-01-14 AOE.
Hi Ned. I am not a core developer, but can https://bugs.python.org/issue42938 please be included? I know it is past the deadline, but I have not seen the releases. Ned has postponed the upcoming security releases for the issue. Benjamin's fix has landed two days ago. The fixes will be included in 3.7.10 and 3.6.13.
Thanks, Christian, that's correct. In the meantime, another potential security issue has arisen that might impact 3.7 and 3.6 so I'm going to continue to hold off on the releases until we have a resolution of that. https://bugs.python.org/issue42967 -- Ned Deily nad@python.org -- []
On Wed, Jan 20, 2021 at 7:22 PM Ned Deily
In the meantime, another potential security issue has arisen that might impact 3.7 and 3.6 so I'm going to continue to hold off on the releases until we have a resolution of that.
And another security issue was brought up to our attention here (today): https://bugs.python.org/issue42987
On Thu, Jan 21, 2021 at 5:09 AM Senthil Kumaran
And another security issue was brought up to our attention here (today): https://bugs.python.org/issue42987
This one was already fixed (the issue is closed). Victor -- Night gathers, and now my watch begins. It shall not end until my death.
participants (5)
-
Christian Heimes -
Miro Hrončok -
Ned Deily -
Senthil Kumaran -
Victor Stinner