End of Python 2.4-2.6 and 3.1-3.3 support

Ned Deily nad at acm.org
Sun Oct 12 15:15:24 PDT 2014


In article 
<CAPSkSp+doUkdFf9NH4KpcJtc-XdVTuTfD6iFJ+Sr+LgGsZpDOQ at mail.gmail.com>,
 Alex Tomkins <tomkins at darkzone.net> wrote:
> However could the 3.2 and 3.3 ports be reconsidered?
> 
> 3.2 is supported until February 2016 -
> http://legacy.python.org/dev/peps/pep-0392/
> 3.3 is supported until September 2017 -
> http://legacy.python.org/dev/peps/pep-0398/

For some value of supported: both 3.2.x and 3.3.x are now in upstream's 
security-fix-only mode which means they only receive fixes that fix 
"issues exploitable by attackers such as crashes, privilege escalation 
and, optionally, other issues such as denial of service attacks. Any 
other changes are not considered a security risk and thus not backported 
to a security branch."  In particular, 3.2.x and 3.3.x are not tested or 
updated upstream (e.g. by python-dev) to support new operating system 
releases or any other kind of bugs other than those that meet the 
security criteria above.  Downstream distributors like MacPorts are, of 
course, free to provide whatever level of additional support they deem 
fit, like backporting fixes but, especially for Python 3, there are lots 
of good reasons to use the most recent release.

-- 
 Ned Deily,
 nad at acm.org



More information about the macports-users mailing list