Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Benjamin Peterson
On Mon, Oct 6, 2014, at 19:13, Ned Deily wrote: > In article > , > Zachary Ware wrote: > > On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: > > > 3. security: "fixing issues exploitable by attackers such as crashes, > > > privilege escalation and, optionally, other issues such as denial of > >

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Ned Deily
In article , Zachary Ware wrote: > On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: > > 3. security: "fixing issues exploitable by attackers such as crashes, > > privilege escalation and, optionally, other issues such as denial of > > service attacks. Any other changes are not considered a sec

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Matěj Cepl
On 2014-10-06, 20:03 GMT, Victor Stinner wrote: > I started a list of Python 2 bugs that will not be fixed: > http://haypo-notes.readthedocs.org/python.html\ > #bugs-that-won-t-be-fixed-in-python-2-anymore > > It *is* possible to fix all bugs, but it requires a large amount of > work, and we decide

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Victor Stinner
Hi, 2014-10-06 18:08 GMT+02:00 Ethan Furman : > With the incredibly long life span of 2.7, which bugs should we *not* fix? I started a list of Python 2 bugs that will not be fixed: http://haypo-notes.readthedocs.org/python.html#bugs-that-won-t-be-fixed-in-python-2-anymore It *is* possible to fix

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread R. David Murray
On Mon, 06 Oct 2014 21:18:23 +0200, Christian Tismer wrote: > On 06.10.14 20:55, Zachary Ware wrote: > > On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: > >> 3. security: "fixing issues exploitable by attackers such as crashes, > >> privilege escalation and, optionally, other issues such as de

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Zachary Ware
On Mon, Oct 6, 2014 at 2:18 PM, Christian Tismer wrote: > My impression is that no 3.X user ever would want to stick > with any older version. > > Is that true, or am I totally wrong? My impression is that you're mostly right, but only because those who would still be on 3.1 are actually still on

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Christian Tismer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06.10.14 20:55, Zachary Ware wrote: > On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: >> 3. security: "fixing issues exploitable by attackers such as crashes, >> privilege escalation and, optionally, other issues such as denial of >> service a

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Zachary Ware
On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: > 3. security: "fixing issues exploitable by attackers such as crashes, > privilege escalation and, optionally, other issues such as denial of > service attacks. Any other changes are not considered a security risk > and thus not backported to a se

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Chris Angelico
On Tue, Oct 7, 2014 at 4:33 AM, Skip Montanaro wrote: > On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: >> So 2.7.x is not "security only" and wouldn't reach that stage until 2020 >> under current policy. > > Apparently no other 2.x release qualifies as "security only" at this > point? I would

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Ned Deily
In article , Skip Montanaro wrote: > Apparently no other 2.x release qualifies as "security only" at this > point? I would have expected at least 2.6 to fall into that category. 2.6 had its five-year run. "Python 2.6.9 is the final security-only source-only maintenance release of the Python 2

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Skip Montanaro
On Mon, Oct 6, 2014 at 12:24 PM, Ned Deily wrote: > So 2.7.x is not "security only" and wouldn't reach that stage until 2020 > under current policy. Apparently no other 2.x release qualifies as "security only" at this point? I would have expected at least 2.6 to fall into that category. Skip ___

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Ned Deily
In article <5432be77.40...@stoneleaf.us>, Ethan Furman wrote: > With the incredibly long life span of 2.7, which bugs should we *not* fix? > > For example, in http://bugs.python.org/issue22297 I mentioned one reason to > not fix that bug was that the fix was not in > 3.1-3.3, but 2.7 will outl

Re: [Python-Dev] Fixing 2.7.x

2014-10-06 Thread Antoine Pitrou
On Mon, 06 Oct 2014 09:08:23 -0700 Ethan Furman wrote: > With the incredibly long life span of 2.7, which bugs should we *not* fix?* Those that are not bugs but enhancement requests. On that issue, you pointed out there was no regression and that enums were never meant to be supported by the json

[Python-Dev] Fixing 2.7.x

2014-10-06 Thread Ethan Furman
With the incredibly long life span of 2.7, which bugs should we *not* fix? For example, in http://bugs.python.org/issue22297 I mentioned one reason to not fix that bug was that the fix was not in 3.1-3.3, but 2.7 will outlive all those plus a couple more. So, what are the current guidelines on