Menu
▾
▴
Re: [Jython-dev] Python 2 End of Support Impact on Jython 2
|
From: Jeff A. <ja...@fa...> - 2020-07-10 10:21:14
|
Hello Aditya. 2.5.3 is not supported. We recognise upgrading is a big step, and would be interested if there is something about 2.7.2 that deters you. In the run-up to 2.7.2 we upgraded a number of JARs in the interests of security. We don't want to leave Jython 2.7.x unsupported until there's a viable successor. Work is going on (behind the scenes) towards a Jython 3 interpreter. Work on 2.7.3 detracts from progress on Jython 3, which we'd all rather see. The libraries that come with Jython 2.7 are CPython 2.7 libraries with some replacements specific to Jython. We have not actively tracked the CPython version of the stdlib. (There are definitely bugs.) Updating yourself beyond what is supplied is entirely at your risk. You will realise this, and you must have a good understanding of the libraries, or it wouldn't be working for you at all. You cannot (nor can we) just add libraries from CPython 3 to Jython 2.7.x, except in very limited cases. It takes a new compiler, changes to the object model, and a hundred other things: Jython 3.x in fact. I've sometimes taken snippets of code from the Python 3 stdlib, e.g where the tests were more comprehensive. That's all. We are thinking of Jython 3.8, which would come with CPython 3.8.x stdlib (where x is the latest available). Big job: foolish to offer a date. HTH Jeff Allen On 07/07/2020 12:55, Aditya Raj wrote: > Hello Team, > > We having few query related to Jython 2.x and after EOL of Python 2 > what was the impact on Jython 2.x. > I also checked that current Jython release is 2.7.2. > > In our tool , we are using jython version 2.5.3, In timely manner some > security vulnerablities are also getting reported on Python, then > Python usuallly release fixes for these vulnerability for its various > stream(such as 2.7, 3.5, 3.6 ..etc). > To overcome these security issue in our jython 2.5.3 , we simply > merges the code in our jython files from the patched file released in > Python 2.7 stream. But after EOL of Python 2.x , no official fix is > releasing for Python 2.x stream.We are unable to handle those security > vulnerability in Jython 2.5.3. > > Few queries are : > > * How we handle/fix those reported vulnerability for Python 2 in > jython 2.x libraries ? > * For Jython users. will jython.org would be providing fix for the > same vulnerability which will reported in Python 2 stream?or any > plan in future? > * Is jython 2.x having resemblance with python 2.x libraries only?or > python 3.x also supported in jython 2.x?As currently jython > version is 2.7.2 but python having 3.7.x version . Can you please > clarify Is any particular jython version supports any specific > Python version libraries? > * Is any plan to release jython 3.x libraries to incorporate or > support python 3.x in it? > > We are currently blocked for few security vulnerabilties > implementation in jython 2.5.3. > Your suggestion is helpful here. Please respond > > Thanks > Aditya Raj > > > > ------------------------------------------------------------------------ > *From:* Aditya Raj > *Sent:* Tuesday, July 7, 2020 4:49 PM > *To:* jyt...@li... <jyt...@li...> > *Cc:* Ravneet Singh <rav...@ar...>; Prashant Kumar > <pra...@ar...> > *Subject:* Python 2 End of Support Impact on Jython 2 > Hello Team, > > We having few query related to Jython 2.x and after EOL of Python 2 > what was the impact on Jython 2.x. > I also checked that current Jython release is 2.7.2. > > In our tool , we are using jython version 2.5.3, In timely manner some > security vulnerablities are also getting reported on Python, then > Python usuallly release fixes for these vulnerability for its various > stream(such as 2.7, 3.5, 3.6 ..etc). > To overcome these security issue in our jython 2.5.3 , we simply > merges the code in our jython files from the patched file released in > Python 2.7 stream. But after EOL of Python 2.x , no official fix is > releasing for Python 2.x stream.We are unable to handle those security > vulnerability in Jython 2.5.3. > > Few queries are : > > * How we handle/fix those reported vulnerability for Python 2 in > jython 2.x libraries ? > * For Jython users. will jython.org would be providing fix for the > same vulnerability which will reported in Python 2 stream?or any > plan in future? > * Is jython 2.x having resemblance with python 2.x libraries only?or > python 3.x also supported in jython 2.x?As currently jython > version is 2.7.2 but python having 3.7.x version . Can you please > clarify Is any particular jython version supports any specific > Python version libraries? > * Is any plan to release jython 3.x libraries to incorporate or > support python 3.x in it? > > We are currently blocked for few security vulnerabilties > implementation in jython 2.5.3. > Your suggestion is helpful here. Please respond > > Thanks > Aditya Raj > > ===================================================== > Please refer to https://northamerica.altran.com/email-disclaimer > for important disclosures regarding this electronic communication. > ===================================================== > > > _______________________________________________ > Jython-dev mailing list > Jyt...@li... > https://lists.sourceforge.net/lists/listinfo/jython-dev |
