[issue43338] [feature request] Please provide offical installers for security releases

2021-02-27 Thread Zhang Boyang


New submission from Zhang Boyang :

Hello,

Thanks for developing Python! I noticed there is no offical installers for 
security releases of old python version. This looks a little strange to me. As 
a python user & developer, it's often to stay with some old version of python, 
because some package's version constraints, or we need to support old platforms.

The offical installer is the most trusted installaion source, but it's not 
provided with security releases. Lacking of installers makes installaion 
extreme difficult (impossible for end users), and there's no (free) way for a 
individual to create a code signed copy of python. Non-code-signed binarys will 
lead a lot of problem on recent operating systems.

The choice of providing no offical installer leads a lot of user stay with 
lastest bug-fix release and not upgrading to latest security releases. 
Individuals who want to stay with a old version must either use lastest bug-fix 
release or risk running a non-code-signed python binary. The former lacks 
recent python security fix, and the latter is vulnerable to binary 
modifications such as virus infection.

To sum up, if offical installer is provided, it will make life a lot easier for 
users who want to stay with old python version. It would be appreciated if you 
could accept my feature request.

Thank you!

--
components: Installation
messages: 387774
nosy: zby1234
priority: normal
severity: normal
status: open
title: [feature request] Please provide offical installers for security releases
type: enhancement
versions: Python 3.10

___
Python tracker 
<https://bugs.python.org/issue43338>
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com



[issue43409] [Win] Call subprocess.Popen() twice makes Thread.join() interruptible and deadlock

2021-03-05 Thread Zhang Boyang


New submission from Zhang Boyang :

Please run joinbug.py and press Ctrl-C twice.

= The output  =

1st join
PLEASE PRESS CTRL-C TWICE, IGNORE THE 'Press any key to continue'
Press any key to continue . . . Press any key to continue . . .

thread exit
Traceback (most recent call last):
  File "D:\xxx\joinbug.py", line 21, in 
t.join() # subprocess.Popen() makes join() can be interrupted
  File "C:\Users\xxx\AppData\Local\Programs\Python\Python39\lib\threading.py", 
line 1033, in join
self._wait_for_tstate_lock()
  File "C:\Users\xxx\AppData\Local\Programs\Python\Python39\lib\threading.py", 
line 1049, in _wait_for_tstate_lock
elif lock.acquire(block, timeout):
KeyboardInterrupt
2nd join
(stuck here)


= Expected behaviour =
either join uninterruptible
or the 2nd join doesn't deadlock.

--
components: Windows
files: joinbug.py
messages: 388156
nosy: paul.moore, steve.dower, tim.golden, zach.ware, zby1234
priority: normal
severity: normal
status: open
title: [Win] Call subprocess.Popen() twice makes Thread.join() interruptible 
and deadlock
type: behavior
versions: Python 3.9
Added file: https://bugs.python.org/file49853/joinbug.py

___
Python tracker 
<https://bugs.python.org/issue43409>
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com