Re: Python 2 End of Support Impact on Jython 2

Hello Aditya.


2.5.3 is not supported. We recognise upgrading is a big step, and would 
be interested if there is something about 2.7.2 that deters you. In the 
run-up to 2.7.2 we upgraded a number of JARs in the interests of security.


We don't want to leave Jython 2.7.x unsupported until there's a viable 
successor. Work is going on (behind the scenes) towards a Jython 3 
interpreter. Work on 2.7.3 detracts from progress on Jython 3, which 
we'd all rather see.


The libraries that come with Jython 2.7 are CPython 2.7 libraries with 
some replacements specific to Jython. We have not actively tracked the 
CPython version of the stdlib. (There are definitely bugs.) Updating 
yourself beyond what is supplied is entirely at your risk. You will 
realise this, and you must have a good understanding of the libraries, 
or it wouldn't be working for you at all.


You cannot (nor can we) just add libraries from CPython 3 to Jython 
2.7.x, except in very limited cases. It takes a new compiler, changes to 
the object model, and a hundred other things: Jython 3.x in fact. I've 
sometimes taken snippets of code from the Python 3 stdlib, e.g where the 
tests were more comprehensive. That's all.


We are thinking of Jython 3.8, which would come with CPython 3.8.x 
stdlib (where x is the latest available). Big job: foolish to offer a date.


HTH

Jeff Allen

On 07/07/2020 12:55, Aditya Raj wrote:
> Hello Team,
>
> We having few query related to Jython 2.x and after EOL of Python 2 
> what was the impact on Jython 2.x.
> I also checked that current Jython release is 2.7.2.
>
> In our tool , we are using jython version 2.5.3, In timely manner some 
> security vulnerablities are also getting reported on Python, then 
> Python usuallly release fixes for these vulnerability for its various 
> stream(such as 2.7, 3.5, 3.6 ..etc).
> To overcome these security issue in our jython 2.5.3 , we simply 
> merges the code in our jython files from the patched file released in 
> Python 2.7 stream. But after EOL of Python 2.x , no official fix is 
> releasing for Python 2.x stream.We are unable to handle those security 
> vulnerability in Jython 2.5.3.
>
> Few queries are :
>
>   * How we handle/fix those reported vulnerability for Python 2 in
>     jython 2.x libraries ?
>   * For Jython users. will jython.org  would be providing fix for the
>     same vulnerability which will reported in Python 2 stream?or any
>     plan in future?
>   * Is jython 2.x having resemblance with python 2.x libraries only?or
>     python 3.x also supported in jython 2.x?As currently jython
>     version is 2.7.2 but python having 3.7.x version . Can you please
>     clarify Is any particular jython version supports any specific
>     Python version libraries?
>   *  Is any plan to release jython 3.x libraries to incorporate or
>     support python 3.x in it?
>
> We are currently blocked for few security vulnerabilties 
> implementation in jython 2.5.3.
> Your suggestion is helpful here. Please respond
>
> Thanks
> Aditya Raj
>
>
>
> ------------------------------------------------------------------------
> *From:* Aditya Raj
> *Sent:* Tuesday, July 7, 2020 4:49 PM
> *To:* [email protected] <[email protected]>
> *Cc:* Ravneet Singh <[email protected]>; Prashant Kumar 
> <[email protected]>
> *Subject:* Python 2 End of Support Impact on Jython 2
> Hello Team,
>
> We having few query related to Jython 2.x and after EOL of Python 2 
> what was the impact on Jython 2.x.
> I also checked that current Jython release is 2.7.2.
>
> In our tool , we are using jython version 2.5.3, In timely manner some 
> security vulnerablities are also getting reported on Python, then 
> Python usuallly release fixes for these vulnerability for its various 
> stream(such as 2.7, 3.5, 3.6 ..etc).
> To overcome these security issue in our jython 2.5.3 , we simply 
> merges the code in our jython files from the patched file released in 
> Python 2.7 stream. But after EOL of Python 2.x , no official fix is 
> releasing for Python 2.x stream.We are unable to handle those security 
> vulnerability in Jython 2.5.3.
>
> Few queries are :
>
>   * How we handle/fix those reported vulnerability for Python 2 in
>     jython 2.x libraries ?
>   * For Jython users. will jython.org  would be providing fix for the
>     same vulnerability which will reported in Python 2 stream?or any
>     plan in future?
>   * Is jython 2.x having resemblance with python 2.x libraries only?or
>     python 3.x also supported in jython 2.x?As currently jython
>     version is 2.7.2 but python having 3.7.x version . Can you please
>     clarify Is any  particular jython version supports any specific
>     Python version libraries?
>   *  Is any plan to release jython 3.x libraries to incorporate or
>     support python 3.x in it?
>
> We are currently blocked for few security vulnerabilties 
> implementation in jython 2.5.3.
> Your suggestion is helpful here. Please respond
>
> Thanks
> Aditya Raj
>
> =====================================================
> Please refer to https://northamerica.altran.com/email-disclaimer
> for important disclosures regarding this electronic communication.
> =====================================================
>
>
> _______________________________________________
> Jython-dev mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/jython-dev

_______________________________________________
Jython-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jython-dev