Snynet Solution Logo
MON - SUN: 10 AM - 6 PM
+60 11 5624 8319

Blog

Python update patches several major security flaws

Image Description

The Python programming language has been forced to scurry to put out a new release of the popular programming language to address several security issues.

While the fix for the security flaws had already been pushed in the release candidate, the Python community urged the developers to bring them over to a stable release as soon as possible.

“Since the announcement of the release candidates for 3.9.2 on 3.8.8, we received a number of inquiries from end users urging us to expedite the final releases due to the security content, especially CVE-2021-3177,” note Python’s release team members in the release notes.

Toothless exploits

The vulnerability tracked as CVE-2021-3177 that spooked the community in particular is a remote code execution (RCE) flaw that could theoretically allow threat actors to execute arbitrary commands or code on a target machine. Moreover, it’s existed in all Python 3 releases through to Python 3.9.1.

However, the release team notes that practical exploits of the vulnerability were “very unlikely” since several conditions had to be met for a successful exploit. They go on to refer to Red Hat’s analysis of the vulnerability who note that “the highest threat from this vulnerability is to system availability.” 

Be that as it may, the issue has been fixed and the release team urges all Python users to switch to the latest release. Reports also note that long term support (LTS) releases such as Debian are backporting the security patches to ensure that earlier Python versions are inoculated as well.

Via: ZDNet

Date

23 Feb 2021

Sources


Share


Other Blog

  • Global POS sales to top $17.3 trillion worldwide by 2026

    Better terminals with smart features and less demand for physical cash is driving the demand for point of sale terminals.

    Read More
  • Chrome OS is coming to PCs and Macs

    Google has announced a new version of its Chrome OS software that should allow it to expand to PC and Mac devices for the first time.

    The new Chrome OS Flex is designed to run on older machines, and looks to offer businesses and schools in particular with more flexibility on their software choices.

    The "cloud-first" software looks similar to the equivalent already seen on Chromebook devices, offering a stripped-back way to access Google Workspace tools such as Gmail, Meet, Google Docs, with thousands of apps available from the Play Store.

    Chrome OS Flex

    "End-user computing is complicated. And it’s even more complicated for businesses and schools," Thomas Riedl, Google Cloud Director of Product, Enterprise and Education, wrote in a blog post announcing the news. 

    "Slow boot times, intrusive updates, security add-ons, and burdensome management of legacy devices take valuable time away from employees, students, and IT."

    "Chrome OS Flex modernizes devices you already own, allowing you to experience the benefits of Chrome OS on PCs and Macs."

    Chrome OS Flex home screen

    (Image credit: Google)

    Google says that Chrome OS Flex "boots up in seconds", meaning there's no long wait times for your device to get ready, with system updates downloading in the background.

    Admins can install Chrome OS Flex across business or school devices via USB or network, allowing for a speedy roll-out, with user profiles downloaded through the cloud, automatically syncing their settings, policies and bookmarks.

    Chrome OS Flex will also benefit from Google's regular security updates against the latest threats, and Google also notes that due to its un-demanding specs, using Chrome OS Flex means you can keep your existing devices for longer, helping cut down on e-waste.

    Riedl noted that the launch had been helped by Google's 2020 acquisition of Neverware, whose Chromium-based CloudReady OS helped businesses around the world shift onto the company's software.

    Google says that Chrome OS Flex is not a finished product yet, but users can try the new software as a free trial now ahead of a wider release later this year.

    Read More
  • Liquid Web jumps into managed cloud hosting

    Managed cloud hosting service is designed for enterprise businesses.

    Read More
  • New iPad Air 5: what we want to see

    Here's what we'd like to see in the fifth-generation model of the iPad Air.

    Read More

Find Out More About Us

Want to hire best people for your project? Look no further you came to the right place!

Contact Us