*** This bug is a security vulnerability *** You have been subscribed to a public security bug by Marc Deslauriers (mdeslaur):
Hello, We started getting communications from PayPal that the Braintree Python SDK 3.57.1-1 may not be supported in the near future. The deadline was extended to May 31, 2023 The email states that v3.59.1 is the minimum required version for the v3 series. Otherwise, v4.17.1 or higher. Here is the second email we received: ---- We reached out to you on January 10 and January 17, 2023, because our records showed that you were using an old version of the Braintree Python SDK. This is a reminder that a new version of the SDK was released on October 14, 2022, with new security enhancements. Please upgrade to the Braintree Python SDK v.4.17.1 or higher as soon as possible. Please disregard if you have already updated your Braintree Python SDK but take action now if you haven’t yet done so. While the original timeline to end support for older versions was February 28, Braintree has extended the support window to make this update by an additional 90 days, 31 May 2023. However, beginning on May 31, 2023, older versions of the Braintree Python SDK may be retired, meaning that Braintree developers and Braintree Support reserve the right to sunset older versions. We are also reaching out to channel partners to alert them of the need to update to ensure that SDKs are updated well ahead of the stated deadline. If you are integrated via a channel partner, please reach out to them to align on any next steps they will need to take on your behalf. To make this update: - If you are currently using v4 of the Braintree Python SDK, you only need to upgrade the Braintree Python SDK to v4.17.1 or higher. Your integration will not require any other changes. - If you are currently using v3 or lower of the Braintree Python SDK, please upgrade to Braintree Python SDK v3.59.1. You also should plan to upgrade to v4.17.1 or higher in the near future. See our migration guide for details on necessary integration changes. If this remediation requires an update to your integration, you may also need to engage a developer or speak to your shopping cart or third- party provider depending on your integration. You may also reach out to your channel partner to understand if any further action is needed. For any questions, please don’t hesitate to contact Braintree Support for assistance. Thank you, PayPal ** Affects: python-braintree (Ubuntu) Importance: Undecided Status: New ** Tags: braintree community-security eol library payments python -- SDK version in LTS EOL https://bugs.launchpad.net/bugs/2009082 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs