Hi Vince/Pythonnet,
Is there any update on this?
Thanks,
Di
From: Di Yang (PACTERA TECHNOLOGIES INC)
Sent: Monday, July 12, 2021 10:55 AM
To: 'Vince Luff' ; 'A list for users and developers of Python.NET'
Cc: Douglas Wyant (Aptly Technology Corporation) ; Fan Yang (COMMERCE)
Subject: RE: [Python.NET] Re: Support for Python v3.9
Hi Vince/Pythonnet,
Is there any update on this?
Thanks,
Di
From: Di Yang (PACTERA TECHNOLOGIES INC)
Sent: Thursday, July 8, 2021 11:11 AM
To: Vince Luff mailto:vinceluff@hotmail.com>; A list for users and developers of Python.NET mailto:pythonnet@python.org>
Cc: Douglas Wyant (Aptly Technology Corporation) mailto:v-douglw@microsoft.com>; Fan Yang (COMMERCE) mailto:fay@microsoft.com>
Subject: RE: [Python.NET] Re: Support for Python v3.9
Hi Vince/Pythonnet,
I tested again with Python 3.9.6 which is released on 6/28, still got error when running "pip install pythonnet". I got the same error on two machines. How could we solve it?
[cid:image001.png@01D77965.F7BAEF00]
Thanks,
Di
From: Vince Luff mailto:vinceluff@hotmail.com>
Sent: Saturday, May 15, 2021 4:19 AM
To: A list for users and developers of Python.NET mailto:pythonnet@python.org>
Cc: Di Yang (PACTERA TECHNOLOGIES INC) mailto:v-diyan@microsoft.com>; Douglas Wyant (Aptly Technology Corporation) mailto:v-douglw@microsoft.com>
Subject: [EXTERNAL] Re: [Python.NET] Re: Support for Python v3.9
Hi guys,
Am I missing something here, because Python.Net v2.5.2 already supports Python 3.9:
https://github.com/pythonnet/pythonnet/releaseshttps://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fpythonnet%2Fpythonnet%2Freleases&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677417311%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=OEVv80uryS4cAJj%2FVg3G1vn93T63vegHPQt2dbrYgaY%3D&reserved=0
"Additionally, includes support for Python 3.9"
Regards,
Vince
________________________________
From: Mark Visser mailto:markv@unity3d.com>
Sent: 13 May 2021 17:14
To: A list for users and developers of Python.NET mailto:pythonnet@python.org>
Cc: Di Yang (PACTERA TECHNOLOGIES INC) mailto:v-diyan@microsoft.com>; Douglas Wyant (Aptly Technology Corporation) mailto:v-douglw@microsoft.com>
Subject: [Python.NET] Re: Support for Python v3.9
Hi Douglas,
It looks to me like this was fixed in Python 3.6, 3.7, 3.8 and 3.9:
From https://python-security.readthedocs.io/vuln/cjk-codec-download-eval.html:https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpython-security.readthedocs.io%2Fvuln%2Fcjk-codec-download-eval.html%3A&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677427307%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=aS%2BV4jyLy5IzjSMrU%2F%2FtmHzJyDFKLKS6kfi2qG8l45Q%3D&reserved=0
Fixed In
* Python 3.6.13 (2021-02-16) fixed by commit e912e94 (branch 3.6)https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fcommit%2Fe912e945f2960029d039d3390ea08835ad39374b&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677437300%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Plm8%2FnyOjoFqSGlnoi3x7K59r2w3dTRuHMtGWQCsr40%3D&reserved=0 (2020-10-20)
* Python 3.7.10 (2021-02-16) fixed by commit 43e5231 (branch 3.7)https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fcommit%2F43e523103886af66d6c27cd72431b5d9d14cd2a9&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677447302%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=WSKZuaaaIjiBLv9GZt8rE%2BTfx8tB5lsktar77Wl1AeU%3D&reserved=0 (2020-10-20)
* Python 3.8.7 (2020-12-21) fixed by commit 6c6c256 (branch 3.8)https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fcommit%2F6c6c256df3636ff6f6136820afaefa5a10a3ac33&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677457296%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=pne30qpj%2BZiNyvdYxh9XIqSU4Jpq2ck97I6SEtqzehI%3D&reserved=0 (2020-10-06)
* Python 3.9.1 (2020-12-07) fixed by commit b664a1d (branch 3.9)https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fcommit%2Fb664a1df4ee71d3760ab937653b10997081b1794&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677457296%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Ejy6IRCmbvUsY%2Busibc8FiEM0UKrBTZJ46rW9reCyac%3D&reserved=0 (2020-10-06)
So you should be able to address the CVE by upgrading to one of these patch versions. AFAIK we don't have a timeline for 3.9 support in Python for .NET yet.
cheers,
-Mark
Mark Visser
Senior Dev Manager, M&E
Unity Technologies - www.unity3d.comhttps://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.unity3d.com%2F&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677467285%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=X2Oxx%2FMu1ICHWF78nx7LZKOHkIlI3lRmbdMPcKPvlRE%3D&reserved=0
On May 12, 2021, at 12:43 PM, Douglas Wyant (Aptly Technology Corporation) via PythonNet mailto:pythonnet@python.org> wrote:
PythonNet,
Hi folks, I have no idea if this is the correct way to engage support / ask questions, so please redirect me. We need to deploy Python v3.9 to resolve a known Security issue in older versions. I'm told we're blocked on deploying until PythonNet is updated to support v3.9. So the question is when might that be?
https://bugs.python.org/issue41944https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugs.python.org%2Fissue41944&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677477281%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=T5QVFG7AmqWaaznwx%2By9bVNNfZefsx3D8DMiGjFQimM%3D&reserved=0
CVE-2020-27619: WIndows
Python versions 3.0.0 through 3.9.0 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).
Affected Versions
Python versions 3.0.0 through 3.9.0
Thanks,
Doug Wyant (Aptly Technology Corporation), GSEC, GCIH
Service Engineer 2
Microsoft
_______________________________________________
PythonNet mailing list -- pythonnet@python.orgmailto:pythonnet@python.org
To unsubscribe send an email to pythonnet-leave@python.orgmailto:pythonnet-leave@python.org
https://mail.python.org/mailman3/lists/pythonnet.python.org/https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail.python.org%2Fmailman3%2Flists%2Fpythonnet.python.org%2F&data=04%7C01%7Cv-diyan%40microsoft.com%7Cf693f50050c04d3878ea08d91793480b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637566744677477281%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zNuEosAM2hYnX%2BT36L7YQiSvg%2Bd7buhnz3G5lBnS2Lc%3D&reserved=0
Member address: markv@unity3d.commailto:markv@unity3d.com
