python36:3.6 security update

エラータID: AXSA:2024-9397:01

Release date: 
Tuesday, December 17, 2024 - 11:27
Subject: 
python36:3.6 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* virtualenv: potential command injection via virtual environment activation scripts (CVE-2024-53899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-53899
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

Modularity name: "python36"
Stream name: "3.6"

Solution: 

Update packages.

CVEs: 
CVE-2024-53899
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
Additional Info: 

N/A

Download: 

SRPMS
  1. python36-3.6.8-39.module+el8+1832+21e1638e.src.rpm
    MD5: 5bb81bcd1ed93feecdddd6fc67384adb
    SHA-256: aeff42b171ac9e244a25b8bb1aded24ec96b3422b9ee68334bf51e09d800cade
    Size: 17.97 kB
  2. python-distro-1.4.0-2.module+el8+1832+21e1638e.src.rpm
    MD5: af1c947a6680149eb6227b5a0b294424
    SHA-256: 558959f67824881f2a3b5a23a3ca985863e5b2a7b50ec75df0e89da35c4c14cc
    Size: 62.96 kB
  3. python-docs-3.6.7-2.module+el8+1832+21e1638e.src.rpm
    MD5: 25ac2775bb25350141244edac99bb49c
    SHA-256: 03ea33ec4cc91a496c361782b19aa27c03ba86495c435ebc903c52626600952f
    Size: 17.98 MB
  4. python-docutils-0.14-12.module+el8+1832+21e1638e.src.rpm
    MD5: b7394d1fb6c30522581ceef619f787de
    SHA-256: eadc22128c58748216c04ddddcd802f1d217f006e68878470024c553e0fd0f3a
    Size: 1.67 MB
  5. python-nose-1.3.7-31.module+el8+1832+21e1638e.src.rpm
    MD5: cc8d9dc693a565b36f0a46301bbecb47
    SHA-256: fdd429c529d61442882dd2255e4f4b08318bb4897de1a799b0e7d673ae095456
    Size: 299.01 kB
  6. python-pygments-2.2.0-22.module+el8+1832+21e1638e.src.rpm
    MD5: 97e7716575522c718ea97e1b8e98228a
    SHA-256: 119ce911c879ab263555259a72079e7e61066a01c17c2c562bc195c403364380
    Size: 2.04 MB
  7. python-pymongo-3.7.0-1.module+el8+1832+21e1638e.src.rpm
    MD5: df59224dbc77d1de027b2b9a6cec0bdc
    SHA-256: c547498b576f707affb3f49753385717fb7e179bfdd5c9bfe7216b3368db6244
    Size: 714.28 kB
  8. python-PyMySQL-0.10.1-2.module+el8+1832+21e1638e.src.rpm
    MD5: 8a3aceb3301dd8694a77dd5e22dfb940
    SHA-256: 7c03c464a980ef647347239edf95aa9595ab8ec5fd7876f518d5b9dbe953ed92
    Size: 88.84 kB
  9. python-sqlalchemy-1.3.2-3.module+el8+1832+21e1638e.src.rpm
    MD5: 74bf0fc0e09ef1213e6ecfe5e7fd84f7
    SHA-256: cd1f1d4c0c1e256fa263c543dace7ea1e206b06cdd9e017076e442c8f2a055de
    Size: 5.60 MB
  10. python-virtualenv-15.1.0-23.module+el8+1832+21e1638e.src.rpm
    MD5: 332e2fde1ab76759f8830edcc32f4ebc
    SHA-256: 05e2839e6aa23cd9febbb516c0f4b9c2813ba05a5f8876872a8e8aae25c65848
    Size: 1.81 MB
  11. python-wheel-0.31.1-3.module+el8+1832+21e1638e.src.rpm
    MD5: 97abc8e034a6553501cfbad8ca5daf4c
    SHA-256: d97d1f5439bf0a638930b93599f660de6223835458a2da7ea91970110eb4f9e6
    Size: 88.61 kB
  12. scipy-1.0.0-21.module+el8+1832+21e1638e.src.rpm
    MD5: bc0e870f590799e8eed531a13d39b137
    SHA-256: 21fa28de5661663ba3f89aab48b458a7390741b37581b0d4b574a5293325cb8b
    Size: 8.95 MB

Asianux Server 8 for x86_64
  1. python36-3.6.8-39.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 5b7079fec7262788fa7d680dcf387cf0
    SHA-256: 8ec8f9b4dc32f9223b290e25513c374e89227325ce91f3d1b56143f358678eec
    Size: 18.28 kB
  2. python36-debug-3.6.8-39.module+el8+1832+21e1638e.x86_64.rpm
    MD5: e265084c512bb0ac102d27466e2086e1
    SHA-256: 918def857031ce3b58c2aa465277f74db357831f84f9887ae27a891626d43f55
    Size: 16.51 kB
  3. python36-devel-3.6.8-39.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 45e46337d28d7371138608dc7ca896b0
    SHA-256: c54d4f89a2dca2293668bb39ecc3f126ebd31f136c8f604020cb26bef17b1ac6
    Size: 15.41 kB
  4. python36-rpm-macros-3.6.8-39.module+el8+1832+21e1638e.noarch.rpm
    MD5: d0709efe3c5e1eb780c1f3e965f27192
    SHA-256: f9fa07652e81fe0e31f76b0e41441f2917e1b0d41aee7ddbd55513349a77957a
    Size: 14.51 kB
  5. python3-bson-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 4a91e3845b81ed9fe55bfdcf818b3e8d
    SHA-256: 54a0d610f96d7db3d69b981b94d142d73a2219b01fe2728141c875e1b68e0068
    Size: 107.14 kB
  6. python3-distro-1.4.0-2.module+el8+1832+21e1638e.noarch.rpm
    MD5: 213546bd96e92dfce75923c34640c7ec
    SHA-256: fec0138c9f01f3541a9909a152e03ac61cd3afefd06ec5abd6a234182d1feaf1
    Size: 35.98 kB
  7. python3-docs-3.6.7-2.module+el8+1832+21e1638e.noarch.rpm
    MD5: 68d0a728906bf3e16d8e33bcaf94d8fa
    SHA-256: 55c80f51b6d7fc8eb48a0a6304dca12a4ddd98d3a0bb74606adcb672c0e68ee9
    Size: 6.88 MB
  8. python3-docutils-0.14-12.module+el8+1832+21e1638e.noarch.rpm
    MD5: 12f7034b0a283eed67d1097c2f9ce65a
    SHA-256: a2d57bad379a7483462b60b3b4187079ae9df56eab5ac2c60117e1b31aa07b2f
    Size: 1.60 MB
  9. python3-nose-1.3.7-31.module+el8+1832+21e1638e.noarch.rpm
    MD5: 9208c56c8b32478990d2bd832f3a659a
    SHA-256: 094fe99735573f4a1b49a12236461736479df2666a8b2d1d806f0ef09bfecd80
    Size: 269.25 kB
  10. python3-pygments-2.2.0-22.module+el8+1832+21e1638e.noarch.rpm
    MD5: 291868680209cd1b4899ed319acb61ac
    SHA-256: 8b35785f1f91e0499d33d65ee7b3a016ff3da77d89dfce7f07dc6bb585c889e8
    Size: 1.89 MB
  11. python3-pymongo-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 55b701c2437951ec4351ad0fd64a245a
    SHA-256: a2d30d49a70e0942e6acda59f16b30ba07eab357a97f72e72b55036092211ef6
    Size: 332.19 kB
  12. python3-pymongo-gridfs-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 1e83e4fcad1584ef14f2e903d8554e78
    SHA-256: 1183d70c384e76f134b544015941a1791982089d8adab98a34cfc0600be31c16
    Size: 44.55 kB
  13. python3-PyMySQL-0.10.1-2.module+el8+1832+21e1638e.noarch.rpm
    MD5: 8ab821515f46557ba864d102a2815725
    SHA-256: bffc722054419248f19670b2d17e608a526a101285285fdf9b9d081417af361e
    Size: 96.31 kB
  14. python3-scipy-1.0.0-21.module+el8+1832+21e1638e.x86_64.rpm
    MD5: bab45bdd3b4a49a743738aaeaed655d2
    SHA-256: bd26bfe51bd57270fe50aeb786c45b28ceb07102091c99f668ce9e4689a8b0ad
    Size: 13.70 MB
  15. python3-sqlalchemy-1.3.2-3.module+el8+1832+21e1638e.x86_64.rpm
    MD5: a5d1b7713141e954e312cfaa49fd8ffb
    SHA-256: 6b6942c385fd54255d25ee55b4193a3febeae65da9a36069e1a83f4c616da3bf
    Size: 1.88 MB
  16. python3-virtualenv-15.1.0-23.module+el8+1832+21e1638e.noarch.rpm
    MD5: de2a06eb3cb8ec69acd95089b47ea60c
    SHA-256: 53a7a10b51d6aa8d632f79ce1f319bc304843876bd4a9201b547a9b46f210c58
    Size: 100.24 kB
  17. python3-wheel-0.31.1-3.module+el8+1832+21e1638e.noarch.rpm
    MD5: 8dec7cc75635360917bdafac2588c84d
    SHA-256: 97883a28cb9accb34ffe9ee7737e03527eef43fe2c54174d40fa1c9f8a976f33
    Size: 67.19 kB
  18. python3-wheel-wheel-0.31.1-3.module+el8+1832+21e1638e.noarch.rpm
    MD5: 57010496e5608c8898b73a104219a7f8
    SHA-256: e9a9a123a091032b0b66e4b491ac5a5f62448fbbd1e4afc78427e88a288bf42c
    Size: 43.33 kB
  19. python-nose-docs-1.3.7-31.module+el8+1832+21e1638e.noarch.rpm
    MD5: 28743e6a14f79a93e2e17d51f250a156
    SHA-256: 0b21757945ceea82578bdbc8797eae4d67a88c182733dfec2edfebb24fe0e6a3
    Size: 46.58 kB
  20. python-pymongo-debugsource-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 9ff61ccf76f93a8448817204c482ae06
    SHA-256: f7c8295c02b1a1983b30a0e0dc9fc4b7961ee330d065a088bed6f9eb793cd56b
    Size: 48.35 kB
  21. python-pymongo-doc-3.7.0-1.module+el8+1832+21e1638e.noarch.rpm
    MD5: 90f6f154d694e4c44fdf55524eeee41a
    SHA-256: 1bb067aec8d9b293201b14623eb29a2bccb6e9df0bbbb2927b53634ddd490bd2
    Size: 504.58 kB
  22. python-sqlalchemy-doc-1.3.2-3.module+el8+1832+21e1638e.noarch.rpm
    MD5: d49ed3991256a20e60d6352f3b989f7d
    SHA-256: b754b798ffdf70fc3bbbbcc9e0838857d32cb7aaa35a4c363662b88deab593cc
    Size: 2.10 MB
  23. python-virtualenv-doc-15.1.0-23.module+el8+1832+21e1638e.noarch.rpm
    MD5: 59e79844035b734916cb4396e2aaeccc
    SHA-256: f44cbc128be109461c1f14333b697c87de16de989f7603c74539bc19271366fe
    Size: 1.62 MB
  24. scipy-debugsource-1.0.0-21.module+el8+1832+21e1638e.x86_64.rpm
    MD5: fa2d8dbf53765eb4ddbce2c949588dd2
    SHA-256: 994d5de381bb1d462fc6728cf21391854095a877689441030c4c296ba8d5711f
    Size: 3.70 MB