Re: [python-committers] [Python-Dev] [RELEASED] Python 3.4.5 and Python 3.5.2 are now available

2016-06-27 Thread Steve Dower

On 26Jun2016 1932, Larry Hastings wrote:

https://www.python.org/downloads/release/python-352/
...
/p.s. There appears to be a small oops with the Windows installers for
3.5.2--uploaded to the wrong directory or something.  They'll be
available soon, honest!


That oops is now fixed, but I wanted to mention one other thing.

Microsoft Security Essentials, now a very common antivirus/antimalware 
scanner on Windows, is incorrectly detecting 
Lib/distutils/command/wininst-14.0.exe as malware (originally reported 
at http://bugs.python.org/issue27383).


My assumption is that someone distributed malware using a bdist_exe 
package, and our stub executable got picked up in the signature. I 
rebuilt the executable on my own machine from early source code and it 
still triggered the scan, so there does not appear to have been any 
change to the behaviour of the executable.


I've already submitted a false positive report, so I expect an update to 
correct it at some point in the future, but please do not be alarmed to 
see this warning when installing Python 3.5.2, or when scanning any 
earlier version of 3.5.


Feel free to contact me off-list or steve.dower at microsoft.com if you 
have concerns.


Cheers,
Steve
___
python-committers mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-committers
Code of Conduct: https://www.python.org/psf/codeofconduct/


Re: [python-committers] [Python-Dev] [RELEASED] Python 3.4.5 and Python 3.5.2 are now available

2016-06-27 Thread R. David Murray
On Mon, 27 Jun 2016 08:25:40 -0700, Steve Dower  wrote:
> On 26Jun2016 1932, Larry Hastings wrote:
> > https://www.python.org/downloads/release/python-352/
> > ...
> > /p.s. There appears to be a small oops with the Windows installers for
> > 3.5.2--uploaded to the wrong directory or something.  They'll be
> > available soon, honest!
> 
> I've already submitted a false positive report, so I expect an update to 
> correct it at some point in the future, but please do not be alarmed to 
> see this warning when installing Python 3.5.2, or when scanning any 
> earlier version of 3.5.
> 
> Feel free to contact me off-list or steve.dower at microsoft.com if you 
> have concerns.

Should there be a note about this on the download page(s)?

--David
___
python-committers mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-committers
Code of Conduct: https://www.python.org/psf/codeofconduct/


Re: [python-committers] [Python-Dev] [RELEASED] Python 3.4.5 andPython 3.5.2 are now available

2016-06-27 Thread Steve Dower
Larry is welcome to add one, but I hope it won't be an issue for long. It's not 
actually directly related to 3.5.2 as the file in question hasn't changed (not 
even rebuilt).

I hoped by informing the lists we'll be able to address concerns as they come 
up, but I'd rather not have a semi-permanent instruction to ignore a virus 
scanner :)

Cheers,
Steve

Top-posted from my Windows Phone

-Original Message-
From: "R. David Murray" 
Sent: ‎6/‎27/‎2016 11:25
To: "python-committers" 
Subject: Re: [python-committers] [Python-Dev] [RELEASED] Python 3.4.5 andPython 
3.5.2 are now available

On Mon, 27 Jun 2016 08:25:40 -0700, Steve Dower  wrote:
> On 26Jun2016 1932, Larry Hastings wrote:
> > https://www.python.org/downloads/release/python-352/
> > ...
> > /p.s. There appears to be a small oops with the Windows installers for
> > 3.5.2--uploaded to the wrong directory or something.  They'll be
> > available soon, honest!
> 
> I've already submitted a false positive report, so I expect an update to 
> correct it at some point in the future, but please do not be alarmed to 
> see this warning when installing Python 3.5.2, or when scanning any 
> earlier version of 3.5.
> 
> Feel free to contact me off-list or steve.dower at microsoft.com if you 
> have concerns.

Should there be a note about this on the download page(s)?

--David
___
python-committers mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-committers
Code of Conduct: https://www.python.org/psf/codeofconduct/
___
python-committers mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-committers
Code of Conduct: https://www.python.org/psf/codeofconduct/

Re: [python-committers] [Python-Dev] [RELEASED] Python 3.4.5 and Python 3.5.2 are now available

2016-06-27 Thread Larry Hastings

On 06/27/2016 11:24 AM, R. David Murray wrote:

On Mon, 27 Jun 2016 08:25:40 -0700, Steve Dower  wrote:

On 26Jun2016 1932, Larry Hastings wrote:

https://www.python.org/downloads/release/python-352/
...
/p.s. There appears to be a small oops with the Windows installers for
3.5.2--uploaded to the wrong directory or something.  They'll be
available soon, honest!

I've already submitted a false positive report, so I expect an update to
correct it at some point in the future, but please do not be alarmed to
see this warning when installing Python 3.5.2, or when scanning any
earlier version of 3.5.

Should there be a note about this on the download page(s)?


I've added a note.

   * Windows users: Some virus scanners (most notably "Microsoft
   Security Essentials") are flagging
   "Lib/distutils/command/wininst-14.0.exe" as malware. This is a
   "false positive": the file does not contain any malware. We build it
   ourselves, from source, on a known-clean system. We've asked that
   this false positive report be removed, and expect action soon. In
   the meantime, please don't be alarmed to see this warning when
   installing Python 3.5.2, or when scanning any earlier version of 3.5.

   https://www.python.org/downloads/release/python-352/



//arry/

p.s. the "oops" was about missing files, not about the false positive 
for malware.
___
python-committers mailing list
[email protected]
https://mail.python.org/mailman/listinfo/python-committers
Code of Conduct: https://www.python.org/psf/codeofconduct/