471,873 Members | 1,913 Online
Bytes | Software Development & Data Engineering Community
Post +

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 471,873 software developers and data experts.

RELEASED Python 2.3.6, release candidate 1

On behalf of the Python development team and the Python
community, I'm announcing the release of Python 2.3.6
(release candidate 1).

Python 2.3.6 is a security bug-fix release. While Python 2.5
is the latest version of Python, we're making this release for
people who are still running Python 2.3. Unlike the recently
released 2.4.4, this release only contains a small handful of
security-related bugfixes. See the website for more.

* Python 2.3.6 contains a fix for PSF-2006-001, a buffer overrun
* in repr() of unicode strings in wide unicode (UCS-4) builds.
* See http://www.python.org/news/security/PSF-2006-001/ for more.

This is a **source only** release. The Windows and Mac binaries
of 2.3.5 were built with UCS-2 unicode, and are therefore not
vulnerable to the problem outlined in PSF-2006-001. The PCRE fix
is for a long-deprecated module (you should use the 're' module
instead) and the email fix can be obtained by downloading the
standalone version of the email package.

Most vendors who ship Python should have already released a
patched version of 2.3.5 with the above fixes, this release is
for people who need or want to build their own release, but don't
want to mess around with patch or svn.

Assuming no major problems crop up, a final release of Python
2.3.6 will follow in about a week's time.

Python 2.3.6 will complete python.org's response to PSF-2006-001.
If you're still on Python 2.2 for some reason and need to work
with UCS-4 unicode strings, please obtain the patch from the
PSF-2006-001 security advisory page. Python 2.4.4 and Python 2.5
have both already been released and contain the fix for this
security problem.

For more information on Python 2.3.6, including download links
for source archives, release notes, and known issues, please see:


Highlights of this new release include:

- A fix for PSF-2006-001, a bug in repr() for unicode strings
on UCS-4 (wide unicode) builds.
- Two other, less critical, security fixes.

Enjoy this release,

Anthony Baxter
Python Release Manager
(on behalf of the entire python-dev team)

Version: GnuPG v1.4.3 (GNU/Linux)


Oct 24 '06 #1
0 1112

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

reply views Thread by Barry Warsaw | last post: by
4 posts views Thread by Anthony Baxter | last post: by
reply views Thread by Anthony Baxter | last post: by
reply views Thread by Anthony Baxter | last post: by
reply views Thread by Anthony Baxter | last post: by
4 posts views Thread by Anthony Baxter | last post: by
reply views Thread by Anthony Baxter | last post: by
16 posts views Thread by =?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?= | last post: by
1 post views Thread by Barry Warsaw | last post: by
reply views Thread by zermasroor | last post: by

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.