<div dir="ltr"><div><div>Hi,<br><br></div>I'm all in favor of updating things like this, however these two have the potential to break some custom scripts out there I think:<br><ul class="gmail-simple"><li>HTTPS certificate validation using the system's certificate store is now
enabled by default. See <a class="gmail-reference external" href="https://www.python.org/dev/peps/pep-0476/">PEP 476</a> for details.</li><li>SSLv3 has been disabled by default in httplib and its reverse dependencies due to the <a class="gmail-reference external" href="https://www.imperialviolet.org/2014/10/14/poodle.html">POODLE attack</a>.</li></ul>Regards<br></div>//Ernst<br></div><div class="gmail_extra"><br><div class="gmail_quote">2016-10-20 19:28 GMT+02:00 Aaron Gable <span dir="ltr"><<a href="mailto:agable@chromium.org" target="_blank">agable@chromium.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks!<br><br><div class="gmail_quote"><span class=""><div dir="ltr">On Wed, Oct 19, 2016 at 11:38 PM Marc Deslauriers <<a href="mailto:marc.deslauriers@canonical.com" target="_blank">marc.deslauriers@canonical.<wbr>com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br class="m_-4291848192021614839gmail_msg">
<br class="m_-4291848192021614839gmail_msg">
On 2016-10-20 03:32 AM, Aaron Gable wrote:<br class="m_-4291848192021614839gmail_msg">
> Hi Ubuntu devs,<br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
> I'd like to inquire about the feasibility of including a update to the<br class="m_-4291848192021614839gmail_msg">
> python2.7[1] package in Ubuntu 14.04 LTS Trusty Tahr.<br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
> In particular, the package is currently pinned at Python version 2.7.6[2] (from<br class="m_-4291848192021614839gmail_msg">
> November 2.13). However, version 2.7.9[3] (from December 2014) includes<br class="m_-4291848192021614839gmail_msg">
> significant network security enhancements[4] that I believe may justify an update.<br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
> Is such an update simply out of the question for an LTS release? If not, who are<br class="m_-4291848192021614839gmail_msg">
> the relevant people for me to discuss this in more depth with?<br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
> Thanks for your help,<br class="m_-4291848192021614839gmail_msg">
> Aaron<br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
> [1] <a href="http://packages.ubuntu.com/trusty/python2.7" rel="noreferrer" class="m_-4291848192021614839gmail_msg" target="_blank">http://packages.ubuntu.com/<wbr>trusty/python2.7</a><br class="m_-4291848192021614839gmail_msg">
> [2] <a href="https://www.python.org/download/releases/2.7.6/" rel="noreferrer" class="m_-4291848192021614839gmail_msg" target="_blank">https://www.python.org/<wbr>download/releases/2.7.6/</a><br class="m_-4291848192021614839gmail_msg">
> [3] <a href="https://www.python.org/downloads/release/python-279/" rel="noreferrer" class="m_-4291848192021614839gmail_msg" target="_blank">https://www.python.org/<wbr>downloads/release/python-279/</a><br class="m_-4291848192021614839gmail_msg">
> [4] <a href="https://www.python.org/dev/peps/pep-0466/" rel="noreferrer" class="m_-4291848192021614839gmail_msg" target="_blank">https://www.python.org/dev/<wbr>peps/pep-0466/</a><br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
><br class="m_-4291848192021614839gmail_msg">
<br class="m_-4291848192021614839gmail_msg">
The plan was to update Ubuntu 14.04 to Python 2.7.10. I'm not sure what the<br class="m_-4291848192021614839gmail_msg">
current status is:<br class="m_-4291848192021614839gmail_msg">
<br class="m_-4291848192021614839gmail_msg">
<a href="https://bugs.launchpad.net/ubuntu/+source/python2.7/+bug/1348955" rel="noreferrer" class="m_-4291848192021614839gmail_msg" target="_blank">https://bugs.launchpad.net/<wbr>ubuntu/+source/python2.7/+bug/<wbr>1348955</a><br class="m_-4291848192021614839gmail_msg">
<a href="https://bugs.launchpad.net/ubuntu/+bug/1525507" rel="noreferrer" class="m_-4291848192021614839gmail_msg" target="_blank">https://bugs.launchpad.net/<wbr>ubuntu/+bug/1525507</a></blockquote><div><br></div></span><div>Is there anything I can do to help these bugs get triaged/prioritized and assigned?</div><div><br></div><div>+<a href="mailto:doko@canonical.com" target="_blank">doko@canonical.com</a></div><div>Matthias, can you provide additional context on the background and current progress on those bugs?<br></div><div><br></div><div>Thanks,</div><div>Aaron</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br class="m_-4291848192021614839gmail_msg">
<br class="m_-4291848192021614839gmail_msg">
Marc.<br class="m_-4291848192021614839gmail_msg">
<br class="m_-4291848192021614839gmail_msg">
</blockquote></div></div>
<br>--<br>
Ubuntu-devel-discuss mailing list<br>
<a href="mailto:Ubuntu-devel-discuss@lists.ubuntu.com">Ubuntu-devel-discuss@lists.<wbr>ubuntu.com</a><br>
Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss" rel="noreferrer" target="_blank">https://lists.ubuntu.com/<wbr>mailman/listinfo/ubuntu-devel-<wbr>discuss</a><br>
<br></blockquote></div><br></div>