Being authorized as a CNA is one milestone in the Python Software Foundation’s strategy to improve the vulnerability response processes of critical projects in the Python ecosystem. The Python Software Foundation CNA scope<\/a> covers Python<\/a> and pip<\/a>, two By becoming a CNA, the PSF will be providing the following benefits to in-scope projects:<\/p>\n CNA operations will be staffed primarily by the recently hired Security Developer-in-Residence<\/a> Seth Michael Larson, Ee Durbin, and Chloe Gerhardson.<\/p>\n The PSF wants to help other Open Source organizations and will be sharing lessons learned and developing guidance on becoming a CNA and day-to-day operations.<\/p>\n To be alerted of newly published vulnerabilities in Python or pip, subscribe to the security-announce@python.org mailing list<\/a> for security advisories. There is also a new advisory database<\/a> published to GitHub using the machine-readable Open Source Vulnerability<\/a> (OSV) format.<\/p>\n If you’d like to report a security vulnerability to Python or pip, the vulnerability disclosure policy is available on python.org<\/a>.<\/p>\n <\/a><\/span><\/p>\n The mission of the Common Vulnerabilities and Exposures (CVE\u00ae) Program is to The Python Software Foundation (PSF) is the non-profit organization When a vulnerability is disclosed in software you’re depending on, the last thing you want is for the remediation process to be confusing or ad-hoc. Towards the goal of a more secure and safe Python ecosystem, the Python Software Foundation has been au…<\/p>\n<\/div>","protected":false},"author":2051,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"The Python Software Foundation has been authorized by the CVE Program as a CVE Numbering Authority (CNA) - ITTeacherITFreelance.hk","description":"When a vulnerability is disclosed in software you're depending on, the last thing you want is for the remediation process to be confusing or ad-hoc. Towards the"},"footnotes":""},"categories":[10700],"tags":[],"_links":{"self":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329432"}],"collection":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/2051"}],"replies":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=329432"}],"version-history":[{"count":1,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329432\/revisions"}],"predecessor-version":[{"id":329433,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329432\/revisions\/329433"}],"wp:attachment":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=329432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/categories?post=329432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/tags?post=329432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nprojects which are fundamental to the rest of Python ecosystem.<\/p>\n\n
identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. There
is one CVE Record for each vulnerability in the catalog. The vulnerabilities are
discovered then assigned and published by organizations from around the world
that have partnered with the CVE Program. Partners publish CVE Records to
communicate consistent descriptions of vulnerabilities. Information technology
and cybersecurity professionals use CVE Records to ensure they are discussing
the same issue, and to coordinate their efforts to prioritize and address the
vulnerabilities.<\/p>\n
\nbehind Python and PyPI. Our mission is to promote, protect, and advance
\nthe Python programming language, and to support and facilitate the
\ngrowth of a diverse and international community of Python programmers.
\nThe PSF supports the Python community using corporate sponsorships,
\ngrants, and donations. Are you interested in sponsoring or donating to
\nthe PSF so it can continue supporting Python and its community? Check
\nout our sponsorship program<\/a>, donate directly here<\/a>, or contact our team!<\/p>\n\n![\\\"IT\u96fb\u8166\u88dc\u7fd2](\\\"http:\/\/itteacheritfreelance.hk\/test\/wordpress\/wp-content\/uploads\/2016\/05\/logo2-2.png\\\"){kind=logo}
\r\nwww.itsec.hk<\/a>
\r\nwww.itsec.vip<\/a>
\r\nwww.itseceu.uk<\/a>
<\/p>","protected":false},"excerpt":{"rendered":"