Red Hat Security AdvisoryRHSA-2024:11094
python36:3.6 security update
Released 2024-12-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) python-PyMySQL-0.10.1-2.module+el8.4.0+9657+a4b6a102.src::python36:3.6, python-distro-1.4.0-2.module+el8.1.0+3334+5cb623d7.src::python36:3.6, python-docs-3.6.7-2.module+el8.1.0+3334+5cb623d7.src::python36:3.6 +31
- Red Hat Enterprise Linux AppStream E4S (v.8.6) python-PyMySQL-0.10.1-2.module+el8.4.0+9657+a4b6a102.src::python36:3.6, python-distro-1.4.0-2.module+el8.1.0+3334+5cb623d7.src::python36:3.6, python-docs-3.6.7-2.module+el8.1.0+3334+5cb623d7.src::python36:3.6 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) python-PyMySQL-0.10.1-2.module+el8.4.0+9657+a4b6a102.src::python36:3.6, python-distro-1.4.0-2.module+el8.1.0+3334+5cb623d7.src::python36:3.6, python-docs-3.6.7-2.module+el8.1.0+3334+5cb623d7.src::python36:3.6 +31
Fixes 1 record
Priority HIGH 72
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.01572 · Published 2024-11-24 · Partial fix · 20.26.6 CWE-78
