Update python 2.7.7 to 2.7.9 - is it safe?

Question

I'm going to update from Python 2.7.7 to 2.7.9 (or better 2.7.10) version. Since I have many projects in progress I have to be very careful.

My question is - is it safe to update to the 2.7.9/10 version? Will everything work as usual?

Is it enough if I just download the msi from python official web and install it?

Answer 1

Minor version upgrades (i.e. 2.7.x to 2.7.y) of Python are generally backwards-compatible, with low risk of things breaking.

See https://hg.python.org/cpython/raw-file/15c95b7d81dc/Misc/NEWS for all the details between 2.7.9 to 2.7.10. There are similar ChangeLog entries between each minor version.

You should have a rollback strategy (with an estimated timeline) on how to revert to 2.7.7 if something goes wrong.

Answer 2

Python 2.7.9特别有几个潜在的重大变化。来自release page：

  

Python 2.7.9包含了“bugfix”版本中前所未有的几个重大变化：

     

  
• 已经为Python 2.7.9移植了Python 3.4's ssl module的全部内容。有关理由，请参阅PEP 466。
  
• 现在默认启用使用系统证书存储的HTTPS证书验证。有关详细信息，请参阅PEP 476。
  
• 默认情况下，由于POODLE attack，httplib及其反向依赖关系已禁用SSLv3。
  

这些更改导致了一些兼容性问题：

1. 必须更新猴子补丁SSL的gevent这样的库。 （见here。）
2. 不安全的代码（例如，它没有验证证书）但由于不安全的默认设置而仍然无法运行。

＃1等问题可以通过更新受影响的库来解决，对于＃2，“明显破坏”可能比“似乎工作但不安全”更好，但这些问题值得注意。

如果您没有使用SSL / TLS，我认为您不必担心任何此类问题。