| | | 📺 Quick Hits | | | | | | Python 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non-default configuration.- The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine.
- Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as.
- Setting multiprocessing.util.abstract_sockets_supported to False is a workaround.
- The forkserver start method for multiprocessing is not the default start method.
- This issue is Linux-specific because only Linux supports abstract namespace sockets.
|
| | | | | | | Python 3.12.0a2 is released with new features and bug fixes.- Modules from the standard library are now potentially suggested as part of the error messages displayed by the interpreter when a NameError is raised to the top level.
- The new version improves the error suggestion for NameError exceptions for instances.
- It adds Python support for the Linux perf profiler through the new environment variable PYTHONPERFSUPPORT, the new command-line option -X perf, as well as the new sys.activate_stack_trampoline(), sys.deactivate_stack_trampoline(), and sys.is_stack_trampoline_active() APIs.
- It improves modules such as asyncio, array, pathlib, dis, os, shutil, sqlite3, sys and threading.
- The team deprecated typing.Hashable and typing.Sized aliases for collections.abc.Hashable and collections.abc.Sized and made other depreciations.
- Previously deprecated APIs and modules will be removed in 3.13.
|
| | | | | | | Arduino announced that it officially supports MicroPython.- Arduino has announced that it is folding MicroPython, the microcontroller-focused Python port designed for resource-constrained devices, into its development ecosystem — partnering with MicroPython creator Damien George to bring the virtual machine to a range of official Arduino development boards.
- Now C/C++ isn't the only game in town with Arduino partnering with Damien George for official MicroPython firmware on selected board models.
- Arduino Lab for MicroPython is now available on labs.arduino.cc for 64-bit Windows, macOS, and Linux hardware on x86 processors.
|
| | | |
|
|
