Red Hat Security AdvisoryRHSA-2024:10979
python3.11 security update
Released 2024-12-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) python3.11-3.11.11-1.el8_10, python3.11-devel-3.11.11-1.el8_10, python3.11-libs-3.11.11-1.el8_10 +2
- Red Hat Enterprise Linux CRB (v. 8) python3.11-3.11.11-1.el8_10, python3.11-debug-3.11.11-1.el8_10, python3.11-idle-3.11.11-1.el8_10 +2
Fixes 1 record
Priority LOW 27
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment…
CVSS 4.0MEDIUM 5.3· Local · High privileges · User interaction · EPSS 0.00648 · Published 2024-10-22 · Partial fix · 3.9.21, 3.10.16 +4 CWE-428
