Closed szepeviktor closed 3 years ago
Yes.
Thank you, Flavio.
Hey @szepeviktor,
Python 3.5 will continue compromised as we can get a patched version of cryptography with CVE-2020-36242 fixed.
The latest version I can provide for python 3.5 is the 3.2.1 that is still compromized:
Here is the test failing while I was fixing #84:
$ pip install -r requirements/basic.txt
DEPRECATION: Python 3.5 reached the end of its life on September 13th, 2020. Please upgrade your Python as Python 3.5 is no longer maintained. pip 21.0 will drop support for Python 3.5 in January 2021. pip 21.0 will remove support for this functionality.
Collecting cartola==0.10
Downloading cartola-0.10.tar.gz (13 kB)
ERROR: Could not find a version that satisfies the requirement cryptography==3.4.4 (from -r requirements/basic.txt (line 2)) (from versions: 0.1, 0.2, 0.2.1, 0.2.2, 0.3, 0.4, 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.6, 0.6.1, 0.7, 0.7.1, 0.7.2, 0.8, 0.8.1, 0.8.2, 0.9, 0.9.1, 0.9.2, 0.9.3, 1.0, 1.0.1, 1.0.2, 1.1, 1.1.1, 1.1.2, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.4, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.7, 1.7.1, 1.7.2, 1.8, 1.8.1, 1.8.2, 1.9, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.2, 2.2.1, 2.2.2, 2.3, 2.3.1, 2.4, 2.4.1, 2.4.2, 2.5, 2.6, 2.6.1, 2.7, 2.8, 2.9, 2.9.1, 2.9.2, 3.0, 3.1, 3.1.1, 3.2, 3.2.1)
ERROR: No matching distribution found for cryptography==3.4.4 (from -r requirements/basic.txt (line 2))
The command "pip install -r requirements/basic.txt" failed and exited with 1 during .
I can get this done without problems, but just letting you know cryptography will be frozen for python 3.5.
Thank you for the progress report.
Thank you.
Is it possible to suppress this message?
:( I run Debian stretch