Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Количество 879

SUSE-SU-2024:0581-1
Security update for python3

SUSE-SU-2024:0438-1
Security update for python3

SUSE-SU-2024:0437-1
Security update for python

SUSE-SU-2024:0436-1
Security update for python36

SUSE-SU-2024:0329-1
Security update for python

RLSA-2024:0256
Moderate: python3 security update
GHSA-vrgr-679p-vf6w
Visual Studio Code Python Extension Remote Code Execution Vulnerability

CVE-2020-17163
Visual Studio Code Python Extension Remote Code Execution Vulnerability
GHSA-4wxh-fpjf-c8wf
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).

CVE-2023-6507
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
---|---|---|---|---|
![]() | SUSE-SU-2024:0581-1 Security update for python3 | 0% Низкий | больше 1 года назад | |
![]() | SUSE-SU-2024:0438-1 Security update for python3 | 0% Низкий | больше 1 года назад | |
![]() | SUSE-SU-2024:0437-1 Security update for python | 0% Низкий | больше 1 года назад | |
![]() | SUSE-SU-2024:0436-1 Security update for python36 | 0% Низкий | больше 1 года назад | |
![]() | SUSE-SU-2024:0329-1 Security update for python | 0% Низкий | больше 1 года назад | |
![]() | RLSA-2024:0256 Moderate: python3 security update | 0% Низкий | больше 1 года назад | |
GHSA-vrgr-679p-vf6w Visual Studio Code Python Extension Remote Code Execution Vulnerability | CVSS3: 7.8 | 1% Низкий | больше 1 года назад | |
![]() | CVE-2020-17163 Visual Studio Code Python Extension Remote Code Execution Vulnerability | CVSS3: 7.8 | 1% Низкий | больше 1 года назад |
GHSA-4wxh-fpjf-c8wf An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`). | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
![]() | CVE-2023-6507 An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`). | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу