Skip to main content
commvault.com commvault.com
Solved

Technical questions about python

  • September 26, 2024
  • 3 replies
  • 67 views
D
Bit
Forum|alt.badge.img+1

Hello.

These are two technical questions, my colleague in charge of security is receiving a notification of a vulnerability in Apache, the following:

CVE-2023-46604: Apache ActiveMQ OpenWire Transport Remote Code Execution Vulnerability

And he has the doubt if this also affects Python.

And the second question is that we have three versions of python installed on the server where commvault is hosted: python 3.6; Python 3.9 and python 3.11.
Are all three essential for commvault to work or can we uninstall two and keep only the one that the console is using?

Best answer by Jacek Piechucki

As Javier mentioned, with newer up Feature Releases (11.28+) kept up-to-date we do not use “externally” installed Python, but only it embedded version located in cvpython folder.

So whatever is installed can be removed assuming, again, that commserve is running fairy new Maintenance Release.

View original
Did this answer your question?

3 replies

J
Vaulter
Forum|alt.badge.img+11
  • JavierVaulter
  • Vaulter
  • 248 replies
  • September 26, 2024

Hi @David Castro ,

 

Could you let us know which version you are running please?

CVE-2023-46604 should have been addressed in FR28.95 and FR32.32

If you are running a version older than FR28 I would strongly suggest to upgrade to ensure you are on a supported version.

As for Python, I seem to remember new Feature Releases are included Python embedded into them and we don’t need a separate installation of them, but don’t quote me on that.

Should you need to update the version of python on the CS, you could follow the next kb article;

https://kb.commvault.com/article/69232

J
Vaulter

As Javier mentioned, with newer up Feature Releases (11.28+) kept up-to-date we do not use “externally” installed Python, but only it embedded version located in cvpython folder.

So whatever is installed can be removed assuming, again, that commserve is running fairy new Maintenance Release.

D
Bit
Forum|alt.badge.img+1
  • David Castro
  • Author
  • Bit
  • 2 replies
  • September 28, 2024

Thanks for the help.

Reply


Most helpful members this week

Terms & ConditionsCookie settings

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings