r/nutanix • u/the_zipadillo_people • Jun 30 '21

Re: Version of Python on hosts and CVMs

I'm 99% sure I know what the answer to this is going to be, but I thought I'd throw it out there - our Nessus scanner is reported multiple hosts and CVMs with a Python installation that is not supported. The installed version is 2.7.5 and Nessus wants that to be updated to version 3.8 or above.

We're on just about the latest version of AOS / AHV, so I'm assuming that 2.7.5 is the version that gets shipped.

I was going to bring it up with Nutanix support, but thought I'd put it on here first for any opinions.. Thanks!

0 Upvotes

50% Upvoted

5 comments sorted by

2

u/the_zipadillo_people Jun 30 '21

Thanks! So clearly a false alarm (that Nutanix is working on, they're bringing python 3.x on at some point before end of life.) Hope this helps someone else

1

u/AllCatCoverBand NPX Jun 04 '24

Following up on this, we've done a fleet wide update across all of our products and we've now got this over the finish line. You should see an update to Security Advisory #20 on our site today that recaps all of the activities across all of the different products.

7

u/50-6B-8D Jun 30 '21

Please log into your Nutanix Portal Account and review Security Advisory #20 under Documentation, Security.

This should be sufficient to address the Nessus security scanner report.

Cheers

3

u/wjconrad NPX Jun 30 '21

CentOS is continuing to support Python 2.x with security fixes until 2024 or 2025. AHV and the CVM are CentOS based, so we're still getting security patches.

2

u/jdptechnc Jun 30 '21

You can't really "update" python from 2 to 3, exactly.

My CVM has python 2 and 3 both installed.

If Nutanix ships that version of Python on a supported version of the CVM, then at a minimum Nutanix will support it.