Red Hat Security AdvisoryRHSA-2024:10980
python3.12 security update
Released 2024-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) python3.12-3.12.8-1.el8_10, python3.12-devel-3.12.8-1.el8_10, python3.12-libs-3.12.8-1.el8_10 +2
- Red Hat Enterprise Linux CRB (v. 8) python3.12-3.12.8-1.el8_10, python3.12-debug-3.12.8-1.el8_10, python3.12-idle-3.12.8-1.el8_10 +2
Fixes 2 records
Priority MEDIUM 47
Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark"…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01868 · Published 2024-12-06 · Fixed in 3.12.9, 3.13.2 +1 CWE-400
Priority LOW 27
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment…
CVSS 4.0MEDIUM 5.3· Local · High privileges · User interaction · EPSS 0.00648 · Published 2024-10-22 · Partial fix · 3.9.21, 3.10.16 +4 CWE-428
