[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ANN] PyInstaller 3.6


on behalf of the PyInstaller development team I'm happy to announce
PyInstaller 3.6.

This version fixes a Local Privilege Escalation vulnerability effecting all Windows software frozen
by PyInstaller in "onefile" mode - no matter which version of PyInstaller was used.


Thanks for all those who contributed questions, bug-reports or

PyInstaller is in urgent need of funding to make future security fixes
happen, see <https://github.com/pyinstaller/pyinstaller/issues/4404> for

=== What it is ===

PyInstaller bundles a Python application and all its dependencies into a
single package. The user can run the packaged app without installing a
Python interpreter or any modules.

PyInstaller reads a Python script written by you. It analyzes your code to
discover every other module and library your script needs in order to
Then it collects copies of all those files ? including the active Python
interpreter! ? and puts them with your script in a single folder, or
optionally in a single executable file.

PyInstaller is tested against Windows, Mac OS X, and Linux. However, it
is not a cross-compiler: to make a Windows app you run PyInstaller in
Windows; to make a Linux app you run it in Linux, etc. PyInstaller has
been used successfully with AIX, Solaris, and FreeBSD, but is not tested
against them.

=== Help keeping PyInstaller alive ===

Maintaining PyInstaller is a huge amount of work.
PyInstaller development can only continue
if users and companies provide sustainable funding.
Please consider recurring donations.
See http://www.pyinstaller.org/funding.html for how
to support PyInstaller.

=== Installation ===

PyInstaller can be installed from PyPi using

   pip install pyinstaller

=== Important Changes ===

* Fixes a Local Privilege Escalation vulnerability effecting all Windows
  software frozen vy PyInstaller in "onefile" mode.

* More then 20 hooks added, more then 15 hooks fixed or improved.

* More then 20 bugs fixed.

* Python 3.4 is no longer tested, since this version is
  end-of-life already.

The full changelog for this release can be found at:


=== Feedback ===

We're eager to listen to your feedback on using PyInstaller:

 Bug tracker: https://github.com/pyinstaller/pyinstaller/issues
 Mailing list: http://groups.google.com/group/PyInstaller

Sch?nen Gru?
Hartmut Goebel
Dipl.-Informatiker (univ), CISSP, CSSLP, ISO 27001 Lead Implementer
Information Security Management, Security Governance, Secure Software

Goebel Consult, Landshut

Kolumne: http://www.cissp-gefluester.de/2012-02-bring-your-own-life-glosse