Поиск уязвимостей

Moderate: python3.11 security update

Moderate: python3.11 security update

A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/bin/activate"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie "./venv/bin/python") are not affected.

ELSA-2024-11111: python3.11 security update (MODERATE)

ELSA-2024-10979: python3.11 security update (MODERATE)

Уязвимость модуля cpython языка программирования Python, позволяющая нарушителю нарушить выполнить произвольный код

Moderate: python3.12 security update

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.

ELSA-2026-2419: python3.12 security update (MODERATE)

Уязвимость компонента Content-Length интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

Security update for python310

Security update for python39

Уязвимость python3

Moderate: python3.9:3.9.21 security update

Important: python3.12 security update

Important: python3.12 security update

Moderate: python3:3.6.8 security update

ELSA-2024-10983: python3.9:3.9.21 security update (MODERATE)

ELSA-2024-10980: python3.12 security update (IMPORTANT)

ELSA-2024-10978: python3.12 security update (IMPORTANT)