A number of enterprise devs had pushed Python’s state-of-the-art in the last few weeks. Notably, Python has a new patch for a particularly sneaky security vulnerability, better support for new logging modules and even an upgraded documentation tool and programmers’ editor.
In this Python wrap, OET provides devs a quick tour, links for code downloads, FAQs and forums.
Security — A buffer overflow in python 2.2’s getaddrinfo() function was discovered earlier this week by Sebastian Schmidt. If python 2.2 is built without IPv6 support, an attacker could configure their name server to let a hostname resolve to a special IPv6 address, which could contain a memory address where shellcode is placed. This problem does not affect python versions prior to 2.2 or versions 2.2.2+, and it also doesn’t exist if IPv6 support is enabled. . Python with the patch is available here. For more background on the problem, go to theMandrakeSoft Security Advisory
Continue reading “Driving Enterprise Python – Patches, Plug-ins, Outlines”
