python3-3.6.8-21.0.3.el7.AXS7

エラータID: AXSA:2025-9726:01

リリース日: 
2025/03/07 Friday - 16:07
題名: 
python3-3.6.8-21.0.3.el7.AXS7
影響のあるチャネル: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

Python is an interpreted, interactive, object-oriented programming language
often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes,
exceptions, very high level dynamic data types and dynamic typing. Python
supports interfaces to many system calls and libraries, as well as to various
windowing systems (X11, Motif, Tk, Mac and MFC). Programmers can write new
built-in modules for Python in C or C++. Python can be used as an extension
language for applications that need a programmable interface. This package
contains most of the standard Python modules, as well as modules for interfacing
to the Tix widget set for Tk and RPM. Note that documentation for Python is
provided in the python-docs package.

Security Fix(es):
- CVE-2024-9287: fix path names quoting to prevent command injection in virtual
environment activation scripts

CVE(s):
CVE-2024-9287

解決策: 

Update packages.

CVE: 
CVE-2024-9287
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/bin/activate"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie "./venv/bin/python") are not affected.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python3-3.6.8-21.0.3.el7.AXS7.src.rpm not found

Asianux Server 7 for x86_64
  1. python3-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: ce4bd68203ea467f504d42babb430bf9
    SHA-256: 6312ca328eda0a6f57ff2249730794e4663e3cd0a5aaf0bcb64049740add549c
    Size: 71.55 kB
  2. python3-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: 0c87340d8e7a6540d879907189eeaece
    SHA-256: 4d74dbd58f4c5849b80bd5c33a9f32f1f68e0c7a111dad36bcd2e4c8ac92c30e
    Size: 71.49 kB
  3. python3-debug-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: b28c8c999b8813e3b18962ba68394841
    SHA-256: 34733ef7063cc4a9f243230419a07cb9572c9e18075f3d452089283d25146c7d
    Size: 2.42 MB
  4. python3-debug-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: 40fe2c13c3d5cd53bdd62fc06ddc8e56
    SHA-256: 86bde2bcd1382bd2adac1bbcdf9d277c8c2f1812535c7522f6fa81b48aa52587
    Size: 2.64 MB
  5. python3-devel-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: 5ae999a5a4313f826cb34f11074608dc
    SHA-256: d060e25421b664ac35956fe9a8ebf2f066bebf67da0cf6defde0a9f564639809
    Size: 218.36 kB
  6. python3-devel-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: 49de652be30ebc351d03fe51f3bcad53
    SHA-256: 35d26352320b6989152278702bbe43535893354bfc3faa34c93d6c9bceed70c4
    Size: 218.17 kB
  7. python3-idle-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: 9997f45d72992d8d918afcad0943ec14
    SHA-256: e87b70dbe12fb456b4ade8a19466312a6d151f1599249357cd6cc69b23dec4c9
    Size: 780.64 kB
  8. python3-idle-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: 20f9164316955f1a1d0bb14b3c6f8fb5
    SHA-256: c647e20402a440cb7c0d54a89bed442776d6eefa60c3132dc57c5540cfbe2a77
    Size: 780.57 kB
  9. python3-libs-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: 74e1483040716c53287dc443ee8d4573
    SHA-256: 2374009a37ef24c84294497cf4e3305c5aa5bb22ff93db3ebd7810a925c5a995
    Size: 6.86 MB
  10. python3-libs-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: 364c263c5127b245862d338d9e9d7fab
    SHA-256: 3af3d4c2cd4d886aa12c6c5f9f6808482d5fd094992f55981949db2e2db3e793
    Size: 6.95 MB
  11. python3-test-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: 574bff12c5e3c8325e7979dae9e05511
    SHA-256: 2a13158c3e629a2037d59139fac1b8ab00d8c92a685fb09135b107cf3da32733
    Size: 7.26 MB
  12. python3-test-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: ef75f9cbbcbc6a9a8b78c930196832d2
    SHA-256: 304cdc099d2aa8eb5e50c8db42edf3cc8286db95729d49b5dfa9824f69b1ce01
    Size: 7.26 MB
  13. python3-tkinter-3.6.8-21.0.3.el7.AXS7.i686.rpm
    MD5: b7eab501d7ca0fedc2996a4613dfd4e6
    SHA-256: b69724dc4383262717e88fe968db65b7aead2aa59cabcfcaa84c56508945a2fc
    Size: 366.92 kB
  14. python3-tkinter-3.6.8-21.0.3.el7.AXS7.x86_64.rpm
    MD5: 367062d0f7af0837a553250ea9ec9b55
    SHA-256: ea389ebe366e5a9b5815446b65dca09325bb7658d924eee53faceabc7737087d
    Size: 366.87 kB