Page 17 - Python Software Foundation News Today : Breaking News, Live Updates & Top Stories | Vimarsana

PSF urges users to update systems to Python 3.8.8 or 3.9.2. (Source: PSF) The Python Software Foundation is sending updates for Python 3.9.2 and 3.8.8 to address critical security vulnerabilities, including a remote code execution vulnerability that can be exploited to shut down systems. Python is a programming language that can be used to develop complex scientific and numeric applications. Its features facilitate data analysis and visualization. PSF urged its software users to update systems to Python 3.8.8 or 3.9.2 to address a remote code execution, or RCE, vulnerability tracked as CVE-20...

Popular programming language, at the top of its game, still struggles to please everyone Share Copy Feature The 30th anniversary of Python this week finds the programming language at the top of its game, but not without challenges. "I do believe that Python just doesn’t have the right priorities these days," said Armin Ronacher, director of engineering at software monitoring biz Sentry and creator of Flask, the popular Python web app framework, in an email interview with The Register. Ronacher, a prolific Python contributor, remains a fan of the language. He credits Python's succes...

But don't worry, say Python maintainers, attackers can only stall your machine even though technically it is remotely exploitable.

Google Cloud donates $350K to fund Python projects Google Cloud donates $350K to fund Python projects Tech giants donates to Python Software Foundation to support CPython maintenance, foundational Python tools and malware detection for the PyPI package repo. Credit: Dreamstime Google Cloud has donated US$350,000 to the Python Software Foundation, with the goals of aiding CPython development, improving foundational Python tools, and beefing up the security of the Python package ecosystem. Three specific projects will be supported by the donation, including productionise...

Tue, 09 Feb 2021 18:04 UTC A researcher managed to breach over 35 major companies' internal systems, including Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, in a novel software supply chain attack. The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into the company's internal applications. Unlike traditional typosquatting attacks that rely on social engineering tactics or the victim misspelling a package name, this particular supply chain attack is more sophisticated as...