python3.14-3.14.5-1.el9_8
エラータID: AXSA:2026-1397:02
リリース日:
2026/07/31 Friday - 13:26
題名:
python3.14-3.14.5-1.el9_8
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Python の webbrowser.open() API には、CVE-2026-4519 の修正が
不十分である問題があるため、リモートの攻撃者により、任意のコード
の実行を可能とする脆弱性が存在します。(CVE-2026-4786)
- Python の http.cookies モジュールには、クロスサイトスクリプ
ティング攻撃を許容してしまう問題があるため、リモートの攻撃者により、
情報の漏洩、および任意のコードの実行を可能とする脆弱性が存在します。
(CVE-2026-6019)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-4786
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.
Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.
CVE-2026-6019
http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
追加情報:
N/A
ダウンロード:
SRPMS
- python3.14-3.14.5-1.el9_8.src.rpm
MD5: c1c7bdce11a2b96e69db2c6ca90593f9
SHA-256: 15ffd7e1ae579da745c6b1b6e1e6431c98ee101265746459fbc1e7d43e2f0a1a
Size: 22.86 MB
Asianux Server 9 for x86_64
- python3.14-3.14.5-1.el9_8.i686.rpm
MD5: 686adf1634b04076f943ee7ab1baacc6
SHA-256: 1afbc57c575f37f0b5aa304555d3b5042ab6ba43d6c23f3a69605893ef3a24fe
Size: 27.51 kB - python3.14-3.14.5-1.el9_8.x86_64.rpm
MD5: cb21bda906c28f09606d63f0239ef977
SHA-256: b0a08e36b28a46762b646956cf5ebbb972f00847cd0320f3d477c46960ecef48
Size: 27.52 kB - python3.14-debug-3.14.5-1.el9_8.i686.rpm
MD5: f797b1c168582f5fdee7b458057d449e
SHA-256: 3b8bc57823e4c5e8cc90bf39e24aeee6d83e607d4211117be106dbc6050b0e88
Size: 4.07 MB - python3.14-debug-3.14.5-1.el9_8.x86_64.rpm
MD5: fdbbbfd155dd847e6f6512f11cde3a53
SHA-256: 6ed2a5353b5a7983ad2a222b3cf64052de1c86d32ad369be488de2aac66d8da3
Size: 4.20 MB - python3.14-devel-3.14.5-1.el9_8.i686.rpm
MD5: 17ec1cd780977f1dc5a2dd21ae884ec2
SHA-256: c566fdd419d475104dcecbfb4af8da712b49e899bf0250e4e15c196384e4078b
Size: 456.72 kB - python3.14-devel-3.14.5-1.el9_8.x86_64.rpm
MD5: 59838ff846d3090722111119f675734d
SHA-256: d562bc56c6ff6d039fde04a950d1407d76f6be79d33409db35a677d20adb1087
Size: 456.67 kB - python3.14-freethreading-3.14.5-1.el9_8.i686.rpm
MD5: c4928ebce0d0352e50c28f4eb68b9ebd
SHA-256: dec08ff86c6ee0fae609da5dbc1af859c85c0d295587c93ba3bf2c764f2c6c11
Size: 18.49 kB - python3.14-freethreading-3.14.5-1.el9_8.x86_64.rpm
MD5: 3d05387248606747df44367f5f7a1e17
SHA-256: 7a30ddfab35fbd1261fef0c075ffd37e6653a207e2e793cd52acafed8f9f88be
Size: 18.41 kB - python3.14-freethreading-debug-3.14.5-1.el9_8.i686.rpm
MD5: 2695d59264e333479e8033873a704b84
SHA-256: 3887429a60099081baa1f8ae7a11f6f21b5e0a0610eabc4bdf6cb1c48520f303
Size: 4.17 MB - python3.14-freethreading-debug-3.14.5-1.el9_8.x86_64.rpm
MD5: 848ec5af10a1c0db0c998e8a20d23c4c
SHA-256: 1dd1be433208ca55ec03433cbf74693de93a790fde570ee419e92346b4759335
Size: 4.31 MB - python3.14-freethreading-devel-3.14.5-1.el9_8.i686.rpm
MD5: 9bb38f636ee8265f7d848d7c72d7107a
SHA-256: 48f6dd6bf0f662b6e88fca57f057d109068c51055988f775b131d9036ce86d03
Size: 443.04 kB - python3.14-freethreading-devel-3.14.5-1.el9_8.x86_64.rpm
MD5: 15dce15bfd0487e5d7295fc18f488a1f
SHA-256: a849371512477dbcd16980c41777d96569f092df3e550360b80944fcb65490e4
Size: 442.97 kB - python3.14-freethreading-idle-3.14.5-1.el9_8.i686.rpm
MD5: 558b68e67bf4a577f9befc503cef22e0
SHA-256: e43f19e5e8cb8935ef366dc63d24d6f97a71542fadcca97f1105283a83956206
Size: 1.10 MB - python3.14-freethreading-idle-3.14.5-1.el9_8.x86_64.rpm
MD5: f90c62cc7a6feebb8f15fbd000ec666d
SHA-256: 4b88132bf18b5f3d6b1e8196b420ae3883fab2389c128859b0e8dcdf599db0a1
Size: 1.10 MB - python3.14-freethreading-libs-3.14.5-1.el9_8.i686.rpm
MD5: 47e5ae84ef41d71f5ddc2364b6504d8c
SHA-256: 64bc6076c07f9baeffcb8c1af65b33be6237a0b29bab6c5dbd6ded2b210e4281
Size: 10.65 MB - python3.14-freethreading-libs-3.14.5-1.el9_8.x86_64.rpm
MD5: ad85c2adf079f1beb4b93016ef53615c
SHA-256: c874558428e439e15918c06f7fcd38afa396838e7b7a960585d72851085b6a46
Size: 10.57 MB - python3.14-freethreading-test-3.14.5-1.el9_8.i686.rpm
MD5: df90cff545b22df756b4710ebacc552d
SHA-256: 89de57746ff60db859681890b31e240c9acf38b4d477bad3a4666c7ee1b42a09
Size: 18.26 MB - python3.14-freethreading-test-3.14.5-1.el9_8.x86_64.rpm
MD5: bcac87af8d294f195796a307b627500a
SHA-256: f5e0df28e7019270f624ddb5ffa61184fe62292ac1d52babfe679d6eb729e42f
Size: 18.26 MB - python3.14-freethreading-tkinter-3.14.5-1.el9_8.i686.rpm
MD5: 6733b003dc2037b5b37d1cebcb461b70
SHA-256: e9b194647be74e7c2740347ef619614af3191a073bbc28911b335f457de990c1
Size: 403.12 kB - python3.14-freethreading-tkinter-3.14.5-1.el9_8.x86_64.rpm
MD5: 90b6549eead13eb4e1bb803985b37211
SHA-256: e143178f03039c8508dc71fc21f4a32fefa957ddc79348d239634f60603e5aa9
Size: 402.03 kB - python3.14-idle-3.14.5-1.el9_8.i686.rpm
MD5: aebb9b12828e3f6d3f02aceaed3cdd3f
SHA-256: 5dfb781235b38d7ff0d9b45f22629f89a8787e00acbadc184dee538c8b3d38a1
Size: 1.10 MB - python3.14-idle-3.14.5-1.el9_8.x86_64.rpm
MD5: 3f1e6e04aa0554dcc73d9699dfe283ec
SHA-256: c15bbb09bcd7807395904ff0befcbceceae898733aeb9d3898aedcc2dcf1d0db
Size: 1.10 MB - python3.14-libs-3.14.5-1.el9_8.i686.rpm
MD5: ae990e8138b9386ecba1bf14572b206c
SHA-256: c926048cc220979e08e1b3dde2de688f6c4723e47f8f5e6e20ff6db017b22dfa
Size: 10.47 MB - python3.14-libs-3.14.5-1.el9_8.x86_64.rpm
MD5: 2785229901f5ca3a700640264b7ca539
SHA-256: dfb25362aa13fde8f99886d13892cb94038d52bd071fd6521e0621d5c1971c94
Size: 10.38 MB - python3.14-test-3.14.5-1.el9_8.i686.rpm
MD5: cab18432a418e694faed94e0c42add2b
SHA-256: e267370a0d2d5f3f33910321bc03904c10d437520eb14c3e039f93baa5d873b2
Size: 18.27 MB - python3.14-test-3.14.5-1.el9_8.x86_64.rpm
MD5: f8eb88456d40a7a4c38f4b1af6319c8e
SHA-256: eec93cae732f9f2f4862d1410d24ca8b1a4b4fd5c4a1b3b0837c1a9d928c050c
Size: 18.26 MB - python3.14-tkinter-3.14.5-1.el9_8.i686.rpm
MD5: 30951579377cd8873aafb9ccc1af7942
SHA-256: 59fc24591ce18699cba123e81fb5ba202413f76ac3287bb2892e0e4c89851d3a
Size: 403.15 kB - python3.14-tkinter-3.14.5-1.el9_8.x86_64.rpm
MD5: 868212fa78f8fd4501cc7c0a468cbdef
SHA-256: 7bbee19f59ab707f539dedd1822cea2cbdc488431eb9569aeb1a02549e267b4b
Size: 402.25 kB