Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power


#Servers
#Opensource
 View Only
  • 1.  Python 2 CVE's

    Posted 02/07/20 01:56 PM

    Originally posted by: 828U_Chris_High


    I notice that AIX Toolbox currently has 2.7.16 of python.  This has a few CVE's out against it:
     https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/version_id-276739/Python-Python-2.7.16.html

    <for some reason, every time I try to paste in the table, I get told my session has expired.  Please follow URL for list.>

    Unless there's back ported patches for these in the published version, can you advise on your plan to resolve.  My understanding is that 2.7.17+ do not have any outstanding CVEs.


    #AIX-Open-Source-Software
    #AIXOpenSource


  • 2.  Re: Python 2 CVE's

    Posted 02/12/20 02:23 AM

    Originally posted by: AyappanP


    We are working on 2.7.17 release ( that is the latest available release for python 2 ) to address these CVE's.


    #AIX-Open-Source-Software
    #AIXOpenSource


  • 3.  Re: Python 2 CVE's

    Posted 02/12/20 12:08 PM

    Originally posted by: 828U_Chris_High


    Thanks!  Just the sort of info I was looking for.


    #AIX-Open-Source-Software
    #AIXOpenSource


  • 4.  Re: Python 2 CVE's

    Posted 04/02/20 07:54 PM

    Originally posted by: 828U_Chris_High


    ... and it was published March 19!  Thanks so very much.


    #AIX-Open-Source-Software
    #AIXOpenSource