Red Hat Security AdvisoryRHSA-2024:11024
python3.9:3.9.18 security update
Released 2024-12-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) python3-3.9.18-3.el9_4.7, python3-debug-3.9.18-3.el9_4.7, python3-idle-3.9.18-3.el9_4.7 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.4) python-unversioned-command-3.9.18-3.el9_4.7, python3-devel-3.9.18-3.el9_4.7, python3-tkinter-3.9.18-3.el9_4.7
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) python3-3.9.18-3.el9_4.7, python3-libs-3.9.18-3.el9_4.7, python3.9-3.9.18-3.el9_4.7
Fixes 1 record
Priority LOW 27
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment…
CVSS 4.0MEDIUM 5.3· Local · High privileges · User interaction · EPSS 0.00648 · Published 2024-10-22 · Partial fix · 3.9.21, 3.10.16 +4 CWE-428
