[Python-Dev] Draft PEP: Maintenance of Python Releases (original) (raw)

Barry Warsaw barry at python.org
Tue May 15 16:08:10 CEST 2007

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On May 15, 2007, at 12:55 AM, Martin v. Löwis wrote:

I don't think I can be more plain than that: yes, I do not take security seriously enough to release security fixes for old Python versions more than once a year. As a user, it's easy to demand things, and people really have to learn that in open source, all things are done by volunteers, and that demanding gets you nowhere. To get a better service, somebody really has to volunteer and offer it.

I've volunteered, and I contend that this community is big enough
that we can recruit more people if necessary. So the question really
comes down to what is in the best interest of Python. If resources
weren't an issue, would you still say that doing security releases
once a year is enough? If so, and if that represents the consensus
of the community, then that's what we'll do.

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin)

iQCVAwUBRkm+ynEjvBPtnXfVAQJW/gQAnzhTEwt9/YCydkRTqI51Z9iAQTikaDpI /2YMpvv6nxJX7dUoDQam08T8BoZ0Vt2iXFXMQ90GD99nYOevFTKMSx7u4l/kY/Do U0a4BG8lVaIZUS5ipW/7suvrQtlkEDqLQ9qpms2LP+6J/32wugw6YLPEi5PyiurM Hax4oeJB37A= =fLgb -----END PGP SIGNATURE-----

More information about the Python-Dev mailing list