python36:3.6 security update

エラータID: AXSA:2024-9397:01

リリース日: 
2024/12/17 Tuesday - 11:27
題名: 
python36:3.6 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- virtualenv Python パッケージには、マジックテンプレート
文字列の処理に問題があるため、リモートの攻撃者により、
細工された仮想環境のアクティベーションスクリプトの実行
を介して、任意のコマンドの実行を可能とする脆弱性が存在
します。(CVE-2024-53899)

Modularity name: python36
Stream name: 3.6

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2024-53899
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python36-3.6.8-39.module+el8+1832+21e1638e.src.rpm
    MD5: 5bb81bcd1ed93feecdddd6fc67384adb
    SHA-256: aeff42b171ac9e244a25b8bb1aded24ec96b3422b9ee68334bf51e09d800cade
    Size: 17.97 kB
  2. python-distro-1.4.0-2.module+el8+1832+21e1638e.src.rpm
    MD5: af1c947a6680149eb6227b5a0b294424
    SHA-256: 558959f67824881f2a3b5a23a3ca985863e5b2a7b50ec75df0e89da35c4c14cc
    Size: 62.96 kB
  3. python-docs-3.6.7-2.module+el8+1832+21e1638e.src.rpm
    MD5: 25ac2775bb25350141244edac99bb49c
    SHA-256: 03ea33ec4cc91a496c361782b19aa27c03ba86495c435ebc903c52626600952f
    Size: 17.98 MB
  4. python-docutils-0.14-12.module+el8+1832+21e1638e.src.rpm
    MD5: b7394d1fb6c30522581ceef619f787de
    SHA-256: eadc22128c58748216c04ddddcd802f1d217f006e68878470024c553e0fd0f3a
    Size: 1.67 MB
  5. python-nose-1.3.7-31.module+el8+1832+21e1638e.src.rpm
    MD5: cc8d9dc693a565b36f0a46301bbecb47
    SHA-256: fdd429c529d61442882dd2255e4f4b08318bb4897de1a799b0e7d673ae095456
    Size: 299.01 kB
  6. python-pygments-2.2.0-22.module+el8+1832+21e1638e.src.rpm
    MD5: 97e7716575522c718ea97e1b8e98228a
    SHA-256: 119ce911c879ab263555259a72079e7e61066a01c17c2c562bc195c403364380
    Size: 2.04 MB
  7. python-pymongo-3.7.0-1.module+el8+1832+21e1638e.src.rpm
    MD5: df59224dbc77d1de027b2b9a6cec0bdc
    SHA-256: c547498b576f707affb3f49753385717fb7e179bfdd5c9bfe7216b3368db6244
    Size: 714.28 kB
  8. python-PyMySQL-0.10.1-2.module+el8+1832+21e1638e.src.rpm
    MD5: 8a3aceb3301dd8694a77dd5e22dfb940
    SHA-256: 7c03c464a980ef647347239edf95aa9595ab8ec5fd7876f518d5b9dbe953ed92
    Size: 88.84 kB
  9. python-sqlalchemy-1.3.2-3.module+el8+1832+21e1638e.src.rpm
    MD5: 74bf0fc0e09ef1213e6ecfe5e7fd84f7
    SHA-256: cd1f1d4c0c1e256fa263c543dace7ea1e206b06cdd9e017076e442c8f2a055de
    Size: 5.60 MB
  10. python-virtualenv-15.1.0-23.module+el8+1832+21e1638e.src.rpm
    MD5: 332e2fde1ab76759f8830edcc32f4ebc
    SHA-256: 05e2839e6aa23cd9febbb516c0f4b9c2813ba05a5f8876872a8e8aae25c65848
    Size: 1.81 MB
  11. python-wheel-0.31.1-3.module+el8+1832+21e1638e.src.rpm
    MD5: 97abc8e034a6553501cfbad8ca5daf4c
    SHA-256: d97d1f5439bf0a638930b93599f660de6223835458a2da7ea91970110eb4f9e6
    Size: 88.61 kB
  12. scipy-1.0.0-21.module+el8+1832+21e1638e.src.rpm
    MD5: bc0e870f590799e8eed531a13d39b137
    SHA-256: 21fa28de5661663ba3f89aab48b458a7390741b37581b0d4b574a5293325cb8b
    Size: 8.95 MB

Asianux Server 8 for x86_64
  1. python36-3.6.8-39.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 5b7079fec7262788fa7d680dcf387cf0
    SHA-256: 8ec8f9b4dc32f9223b290e25513c374e89227325ce91f3d1b56143f358678eec
    Size: 18.28 kB
  2. python36-debug-3.6.8-39.module+el8+1832+21e1638e.x86_64.rpm
    MD5: e265084c512bb0ac102d27466e2086e1
    SHA-256: 918def857031ce3b58c2aa465277f74db357831f84f9887ae27a891626d43f55
    Size: 16.51 kB
  3. python36-devel-3.6.8-39.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 45e46337d28d7371138608dc7ca896b0
    SHA-256: c54d4f89a2dca2293668bb39ecc3f126ebd31f136c8f604020cb26bef17b1ac6
    Size: 15.41 kB
  4. python36-rpm-macros-3.6.8-39.module+el8+1832+21e1638e.noarch.rpm
    MD5: d0709efe3c5e1eb780c1f3e965f27192
    SHA-256: f9fa07652e81fe0e31f76b0e41441f2917e1b0d41aee7ddbd55513349a77957a
    Size: 14.51 kB
  5. python3-bson-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 4a91e3845b81ed9fe55bfdcf818b3e8d
    SHA-256: 54a0d610f96d7db3d69b981b94d142d73a2219b01fe2728141c875e1b68e0068
    Size: 107.14 kB
  6. python3-distro-1.4.0-2.module+el8+1832+21e1638e.noarch.rpm
    MD5: 213546bd96e92dfce75923c34640c7ec
    SHA-256: fec0138c9f01f3541a9909a152e03ac61cd3afefd06ec5abd6a234182d1feaf1
    Size: 35.98 kB
  7. python3-docs-3.6.7-2.module+el8+1832+21e1638e.noarch.rpm
    MD5: 68d0a728906bf3e16d8e33bcaf94d8fa
    SHA-256: 55c80f51b6d7fc8eb48a0a6304dca12a4ddd98d3a0bb74606adcb672c0e68ee9
    Size: 6.88 MB
  8. python3-docutils-0.14-12.module+el8+1832+21e1638e.noarch.rpm
    MD5: 12f7034b0a283eed67d1097c2f9ce65a
    SHA-256: a2d57bad379a7483462b60b3b4187079ae9df56eab5ac2c60117e1b31aa07b2f
    Size: 1.60 MB
  9. python3-nose-1.3.7-31.module+el8+1832+21e1638e.noarch.rpm
    MD5: 9208c56c8b32478990d2bd832f3a659a
    SHA-256: 094fe99735573f4a1b49a12236461736479df2666a8b2d1d806f0ef09bfecd80
    Size: 269.25 kB
  10. python3-pygments-2.2.0-22.module+el8+1832+21e1638e.noarch.rpm
    MD5: 291868680209cd1b4899ed319acb61ac
    SHA-256: 8b35785f1f91e0499d33d65ee7b3a016ff3da77d89dfce7f07dc6bb585c889e8
    Size: 1.89 MB
  11. python3-pymongo-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 55b701c2437951ec4351ad0fd64a245a
    SHA-256: a2d30d49a70e0942e6acda59f16b30ba07eab357a97f72e72b55036092211ef6
    Size: 332.19 kB
  12. python3-pymongo-gridfs-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 1e83e4fcad1584ef14f2e903d8554e78
    SHA-256: 1183d70c384e76f134b544015941a1791982089d8adab98a34cfc0600be31c16
    Size: 44.55 kB
  13. python3-PyMySQL-0.10.1-2.module+el8+1832+21e1638e.noarch.rpm
    MD5: 8ab821515f46557ba864d102a2815725
    SHA-256: bffc722054419248f19670b2d17e608a526a101285285fdf9b9d081417af361e
    Size: 96.31 kB
  14. python3-scipy-1.0.0-21.module+el8+1832+21e1638e.x86_64.rpm
    MD5: bab45bdd3b4a49a743738aaeaed655d2
    SHA-256: bd26bfe51bd57270fe50aeb786c45b28ceb07102091c99f668ce9e4689a8b0ad
    Size: 13.70 MB
  15. python3-sqlalchemy-1.3.2-3.module+el8+1832+21e1638e.x86_64.rpm
    MD5: a5d1b7713141e954e312cfaa49fd8ffb
    SHA-256: 6b6942c385fd54255d25ee55b4193a3febeae65da9a36069e1a83f4c616da3bf
    Size: 1.88 MB
  16. python3-virtualenv-15.1.0-23.module+el8+1832+21e1638e.noarch.rpm
    MD5: de2a06eb3cb8ec69acd95089b47ea60c
    SHA-256: 53a7a10b51d6aa8d632f79ce1f319bc304843876bd4a9201b547a9b46f210c58
    Size: 100.24 kB
  17. python3-wheel-0.31.1-3.module+el8+1832+21e1638e.noarch.rpm
    MD5: 8dec7cc75635360917bdafac2588c84d
    SHA-256: 97883a28cb9accb34ffe9ee7737e03527eef43fe2c54174d40fa1c9f8a976f33
    Size: 67.19 kB
  18. python3-wheel-wheel-0.31.1-3.module+el8+1832+21e1638e.noarch.rpm
    MD5: 57010496e5608c8898b73a104219a7f8
    SHA-256: e9a9a123a091032b0b66e4b491ac5a5f62448fbbd1e4afc78427e88a288bf42c
    Size: 43.33 kB
  19. python-nose-docs-1.3.7-31.module+el8+1832+21e1638e.noarch.rpm
    MD5: 28743e6a14f79a93e2e17d51f250a156
    SHA-256: 0b21757945ceea82578bdbc8797eae4d67a88c182733dfec2edfebb24fe0e6a3
    Size: 46.58 kB
  20. python-pymongo-debugsource-3.7.0-1.module+el8+1832+21e1638e.x86_64.rpm
    MD5: 9ff61ccf76f93a8448817204c482ae06
    SHA-256: f7c8295c02b1a1983b30a0e0dc9fc4b7961ee330d065a088bed6f9eb793cd56b
    Size: 48.35 kB
  21. python-pymongo-doc-3.7.0-1.module+el8+1832+21e1638e.noarch.rpm
    MD5: 90f6f154d694e4c44fdf55524eeee41a
    SHA-256: 1bb067aec8d9b293201b14623eb29a2bccb6e9df0bbbb2927b53634ddd490bd2
    Size: 504.58 kB
  22. python-sqlalchemy-doc-1.3.2-3.module+el8+1832+21e1638e.noarch.rpm
    MD5: d49ed3991256a20e60d6352f3b989f7d
    SHA-256: b754b798ffdf70fc3bbbbcc9e0838857d32cb7aaa35a4c363662b88deab593cc
    Size: 2.10 MB
  23. python-virtualenv-doc-15.1.0-23.module+el8+1832+21e1638e.noarch.rpm
    MD5: 59e79844035b734916cb4396e2aaeccc
    SHA-256: f44cbc128be109461c1f14333b697c87de16de989f7603c74539bc19271366fe
    Size: 1.62 MB
  24. scipy-debugsource-1.0.0-21.module+el8+1832+21e1638e.x86_64.rpm
    MD5: fa2d8dbf53765eb4ddbce2c949588dd2
    SHA-256: 994d5de381bb1d462fc6728cf21391854095a877689441030c4c296ba8d5711f
    Size: 3.70 MB