Red Hat Security AdvisoryRHSA-2024:11111
python3.11 security update
Released 2024-12-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3.11-3.11.9-7.el9_5.2, python3.11-debug-3.11.9-7.el9_5.2, python3.11-idle-3.11.9-7.el9_5.2 +2
- Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.9-7.el9_5.2, python3.11-devel-3.11.9-7.el9_5.2, python3.11-libs-3.11.9-7.el9_5.2 +1
Fixes 1 record
Priority LOW 27
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment…
CVSS 4.0MEDIUM 5.3· Local · High privileges · User interaction · EPSS 0.00648 · Published 2024-10-22 · Partial fix · 3.9.21, 3.10.16 +4 CWE-428
