Python36:3.6 Bug Fix Update
Summary
ALBA-2019:2716: python36:3.6 bug fix update. Affects python3-docs across 2 version ranges.
< 3.6.7-2.module_el8.5.0+135+5ce32bc4
< 3.6.7-2.module_el8.5.0+2569+5c5719bc
Fixed in 3.6.7-2.module_el8.5.0+135+5ce32bc4 or 3.6.7-2.module_el8.5.0+2569+5c5719bc, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Vulnerability Detail
The vulnerability in Python36:3.6 is related to the python-wheel package, which needs to remove or disable their crypto implementation. This vulnerability can potentially lead to security issues and compromise the integrity of the crypto implementation in the package.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update python3-docs-
< 3.6.7-2.module_el8.5.0+135+5ce32bc43.6.7-2.module_el8.5.0+135+5ce32bc4 -
< 3.6.7-2.module_el8.5.0+2569+5c5719bc3.6.7-2.module_el8.5.0+2569+5c5719bc
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the Python36:3.6 bug fix update addresses a vulnerability in the python-wheel package that could potentially lead to security issues. It is recommended to update the package to the fixed version to ensure the integrity of the crypto implementation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for python3-docs →
FAQ
Python is an interpreted, interactive, object-oriented programming language.
The python-wheel package is a tool that helps in building and distributing Python packages.
This vulnerability can potentially lead to security issues and compromise the integrity of the crypto implementation in the python-wheel package.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
You can find more information about this vulnerability in the AlmaLinux OSV Database advisory: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2019:2716.json
References
Related vulnerabilities
Recent vulnerabilities recorded for python3-docs.
