Red Hat Security AdvisoryRHSA-2025:0280
python3.11 security update
Released 2025-01-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) python3.11-3.11.7-1.el9_4.7, python3.11-debug-3.11.7-1.el9_4.7, python3.11-idle-3.11.7-1.el9_4.7 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.4) python3.11-3.11.7-1.el9_4.7, python3.11-devel-3.11.7-1.el9_4.7, python3.11-libs-3.11.7-1.el9_4.7 +1
Fixes 1 record
Priority LOW 27
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment…
CVSS 4.0MEDIUM 5.3· Local · High privileges · User interaction · EPSS 0.00648 · Published 2024-10-22 · Partial fix · 3.9.21, 3.10.16 +4 CWE-428
