Hello,
we are currently using QGIS 3.44.8 (Solothurn) in an enterprise environment.
Our IT security department is receiving recurring Microsoft Defender vulnerability alerts related to the bundled Python 3.12 runtime. We understand that QGIS for Windows relies on the OSGeo4W packaging and that individual vulnerabilities may already be patched there.
To help us assess the situation and provide reliable feedback to our internal security team, I would appreciate some clarification regarding newer Python versions.
Specifically, I am interested in the following questions:
• Is it currently possible to obtain, build, or test a Windows version of QGIS using Python 3.14?
• If not, is a migration of QGIS / OSGeo4W to Python 3.14 planned or actively being considered?
• Are there any major technical blockers currently preventing such a migration (e.g. GDAL, PyQt, NumPy, packaging, or plugin compatibility)?
• Is there a roadmap or rough timeline for moving away from Python 3.12?
• How are security vulnerabilities reported by Microsoft Defender typically addressed within the current OSGeo4W packaging?
Our main goal is to understand whether Python 3.14 support is realistically expected in the foreseeable future, and whether there is any possibility to use a Python 3.14-based QGIS build today. This information would help us evaluate the long-term handling of the reported vulnerabilities and coordinate with our IT security department.
Thanky ou very much for your time and for all the work on QGIS and OSGeo4W.
Best regards,
Oliver Schäfer