DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 7BDBD384AB7E
Message-ID: <6b09ddd1-070f-4bab-87d8-0c8f733b6da3@SystematicSW.ab.ca>
Date: Tue, 23 Apr 2024 12:51:04 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [Question] When the cygwin support Python version 3.11.5 or newer?
Content-Language: en-CA
To: cygwin@cygwin.com
References: <AM6PR07MB5685B689E6A8B92CDB3C27F7AA0E2@AM6PR07MB5685.eurprd07.prod.outlook.com>
 <AM6PR07MB5685A0B746622F7D412904C5AA122@AM6PR07MB5685.eurprd07.prod.outlook.com>
Organization: Systematic Software
In-Reply-To: <AM6PR07MB5685A0B746622F7D412904C5AA122@AM6PR07MB5685.eurprd07.prod.outlook.com>
Precedence: list
From: Brian Inglis via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Brian Inglis <Brian.Inglis@SystematicSW.ab.ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On 2024-04-21 18:25, Zhike Wang via Cygwin wrote:
> Any update/advice for this topic? Or should I raise a ticket to other Cygwin Mailing Lists?

There are no tickets and no other lists - this is the list for Cygwin issues.

> On April 18, 2024 20:29, Zhike Wang wrote:
>> At  the moment, I use python 3.9.16 under Cygwin environment while my 
>> company IT alert me there is a severity risk for python 3.9.16 which need 
>> be upgraded to Python version 3.11.5 or newer asap.
>> I have tried to use Cygwin setup(setup-x86_64) to update the python version
>> but it looks Cygwin only support python up to version 3.9.18 at the
>> moment.
>> So I would like to check with experts when the Cygwin can support Python
>> 3.11.5 or newer version?
>> Thank you very much.

It appears that this is not how python is maintained, as all python modules and 
packages have to be rebuilt for each major version, so fixes are applied to each 
supported major version e.g 3.9!

The web page below is more useful as it shows the current latest python release 
with all known core vulnerabilities fixed for each major version:

	https://maikuolan.github.io/Vulnerability-Charts/python.html

for a few other packages see:

	https://maikuolan.github.io/Vulnerability-Charts/
	https://github.com/Maikuolan/Vulnerability-Charts

so 3.{8,9}.19+ should fix all currently known security issues with 3.{8,9}; 
other releases are required for newer versions.

And 3.11.5 has issues, 3.11.9 is fixed: let your co IT know this!

Please note also that some vulnerabilities are specific to only certain 
platforms and capabilities e.g. Linux:

	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919
	https://nvd.nist.gov/vuln/detail/CVE-2022-42919	

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple