pyenv-win icon indicating copy to clipboard operation
pyenv-win copied to clipboard
verified publisher icon pyenv-win

bug: Security only Python version updates are not listed

Open jeffnyman opened this issue 3 years ago • 1 comments

Currently if you look at the versions of Python 3.8 that are available 3.8.10 is the final regular bugfix release and thus it has a binary installer. But there are three other security updates: 3.8.11, 3.8.12 and 3.8.13.

However, when you use pyenv install -l | findstr 3.8, you will only see up to 3.8.10.

So the issue report here is a discrepancy between:

  • With pyenv-win you can only install the latest with a binary installer.
  • In pyenv on POSIX systems, you can install the security updates.

And the challenge with that discrepancy is that cross-platform projects may now have to use a local .python-version that has to differ between Windows and everything else. A lot of organizations do mandate the upgrading of Python to any security only updates. Further, many open source project teams want to test on those latest security updates as well.

I have tried pyenv update to make sure I have the latest information on the Python versions.

I'm guessing this is because the security only versions don't have a binary included and are instead zip distributions only so I'm not sure if updating pyenv-win to work like pyenv is feasible.

I did see issue #317, but I would also note that the security releases are showing up on https://www.python.org/ftp/python/.

jeffnyman avatar Aug 28 '22 13:08 jeffnyman

@jeffnyman currently we are supporting only .exe files, if python.org is not releasing .exe files for the security updates, that becomes a problem for us to support.

We are thinking to adopt .zip file for installation, which will take some time to test and push to master branch.

kirankotari avatar Sep 16 '22 03:09 kirankotari

@jeffnyman we are sticking to exe files no plans of changing to zip in recent days closing this.

kirankotari avatar Nov 22 '22 15:11 kirankotari

Extract the python zip file and add the path to system ENV and the zip file contains (.pyd, .dll, .exe, .zip, ._pth) add them to your shims for further study to resolve the issues.

  • [ ] List the python zip file in .versions_cache.xml follow #462
  • [ ] New option to install (Extract and place in right location)
  • [ ] Checking cross compatibility and it's issues (folder structure etc)

kirankotari avatar Nov 28 '22 23:11 kirankotari