python-2.7.5-93.0.1.el7.AXS7

エラータID: AXSA:2023-6068:37

Release date: 
Monday, June 19, 2023 - 00:37
Subject: 
python-2.7.5-93.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-24329
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. python-2.7.5-93.0.1.el7.AXS7.src.rpm
    MD5: 80509dc1fb9b1ec50ab74caec27c969c
    SHA-256: aeed9197d4d066b16a05fed8be3901b0f3a33ad9457f2bbbfd8ec10dd8eacade
    Size: 10.26 MB

Asianux Server 7 for x86_64
  1. python-2.7.5-93.0.1.el7.AXS7.x86_64.rpm
    MD5: b17d9562ec5c1b1d3bcfef3ee081b26c
    SHA-256: 64f0daedaed4eea5ff563a41bee0e8d980504d4205445d34c096a0f79a12a674
    Size: 95.77 kB
  2. python-devel-2.7.5-93.0.1.el7.AXS7.x86_64.rpm
    MD5: 710288532359e790898861b2cb32f012
    SHA-256: b5a5639cb8506f3b47ce2f79c2851c7f91bde5bf3591c32a334bc52386b47799
    Size: 398.39 kB
  3. python-libs-2.7.5-93.0.1.el7.AXS7.i686.rpm
    MD5: 8138f4356a7e6ad1bf3029dfa99bae96
    SHA-256: 1a3e45a8a07561d89dfb335d2ed0cc4afef65fcf81fa91ec08d2c0a072db5176
    Size: 5.60 MB
  4. python-libs-2.7.5-93.0.1.el7.AXS7.x86_64.rpm
    MD5: bd1ceca1707c0483ac0ea68f06f998ab
    SHA-256: 632565206cb36b061a4505f68c3a152e01bdcc7f4563740bb76434d7ac649d70
    Size: 5.65 MB