Python: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 1

• Medium 5.3
  CVE-2024-9287

  Virtual environment (venv) activation scripts don't quote paths

  A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 22, 2024

Revision history

1. 2026-10-11 #45

   Neue Updates von openSUSE aufgenommen

2. 2026-09-03 #44

   Neue Updates von Dell aufgenommen

3. 2026-07-09 #43

   Neue Updates von IBM aufgenommen

4. 2025-12-28 #42

   Neue Updates von Oracle Linux aufgenommen

5. 2025-12-17 #41

   Neue Updates von Red Hat aufgenommen

6. 2025-10-30 #40

   Neue Updates von Dell aufgenommen

7. 2025-10-01 #39

   Neue Updates von Dell aufgenommen

8. 2025-08-04 #38

   Neue Updates von Dell aufgenommen

9. 2025-06-23 #37

   Neue Updates von SUSE aufgenommen

10. 2025-06-04 #36

    Neue Updates von SUSE aufgenommen

11. 2025-06-03 #35

    Neue Updates von SUSE aufgenommen

12. 2025-05-14 #34

    Neue Updates von IBM aufgenommen

13. 2025-05-06 #33

    Neue Updates von Ubuntu aufgenommen

14. 2025-04-27 #32

    Neue Updates von NetApp aufgenommen

15. 2025-04-07 #31

    Neue Updates von Amazon aufgenommen

16. 2025-04-01 #30

    Neue Updates von Amazon aufgenommen

17. 2025-03-30 #29

    Neue Updates von IBM aufgenommen

18. 2025-03-24 #28

    Neue Updates von Ubuntu aufgenommen

19. 2025-03-12 #27

    Neue Updates von Ubuntu aufgenommen

20. 2025-02-13 #26

    Neue Updates von Red Hat aufgenommen

21. 2025-01-30 #25

    Neue Updates von IBM aufgenommen

22. 2025-01-12 #24

    Neue Updates von Red Hat aufgenommen

23. 2025-01-09 #23

    Neue Updates von SUSE aufgenommen

24. 2025-01-07 #22

    Neue Updates von Red Hat aufgenommen

25. 2024-12-18 #21

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

References

• Fedora Security Advisory FEDORA-2024-340A4BDC5D vom 2024-12-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-340a4bdc5d
• Oracle Linux Security Advisory ELSA-2024-10978 vom 2024-12-12
  https://linux.oracle.com/errata/ELSA-2024-10978.html
• Red Hat Security Advisory RHSA-2024:11024 vom 2024-12-12
  https://access.redhat.com/errata/RHSA-2024:11024
• Oracle Linux Security Advisory ELSA-2024-10980 vom 2024-12-13
  https://linux.oracle.com/errata/ELSA-2024-10980.html
• Oracle Linux Security Advisory ELSA-2024-10979 vom 2024-12-13
  https://linux.oracle.com/errata/ELSA-2024-10979.html
• Oracle Linux Security Advisory ELSA-2024-10983 vom 2024-12-12
  https://linux.oracle.com/errata/ELSA-2024-10983.html
• Red Hat Security Advisory RHSA-2024:11035 vom 2024-12-13
  https://access.redhat.com/errata/RHSA-2024:11035
• Red Hat Security Advisory RHSA-2025:0079 vom 2025-01-08
  https://access.redhat.com/errata/RHSA-2025:0079
• SUSE Security Update SUSE-SU-2025:0048-1 vom 2025-01-09
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ESRIIF35WWEI2AL5E3H6NFO6TS5DC65A/
• SUSE Security Update SUSE-SU-2025:0049-1 vom 2025-01-09
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LWXPVE6AKWHEV6LBAVR6EUVO2QMG6E3P/
• SUSE Security Update SUSE-SU-2025:0047-1 vom 2025-01-09
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YKKMPDTDLNJTXJFYMTXRDAYFIZFRPTH2/
• Red Hat Security Advisory RHSA-2025:0280 vom 2025-01-13
  https://access.redhat.com/errata/RHSA-2025:0280
• Rocky Linux Security Advisory RLSA-2024:10980 vom 2024-12-19
  https://errata.build.resf.org/RLSA-2024:10980
• Rocky Linux Security Advisory RLSA-2024:10979 vom 2024-12-19
  https://errata.build.resf.org/RLSA-2024:10979
• Fedora Security Advisory FEDORA-2024-0C29724C11 vom 2024-12-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-0c29724c11
• Oracle Linux Security Advisory ELSA-2024-11111 vom 2024-12-16
  http://linux.oracle.com/errata/ELSA-2024-11111.html
• Red Hat Security Advisory RHSA-2024:11111 vom 2024-12-16
  https://access.redhat.com/errata/RHSA-2024:11111
• Red Hat Bugzilla vom 2024-10-24
  https://bugzilla.redhat.com/show_bug.cgi?id=2321440
• RedHat Customer Portal vom 2024-10-24
  https://access.redhat.com/security/cve/CVE-2024-9287
• openSUSE Security Update OPENSUSE-SU-2024:14427-1 vom 2024-10-26
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NJFBQRJPO2RKRNCFXRZ7LBNZOD2J2TFB/
• openSUSE Security Update OPENSUSE-SU-2024:14428-1 vom 2024-10-26
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZYTLEATTD6AS6C3WNEDFOJPHEPEHGVZC/
• SUSE Security Update SUSE-SU-2024:3760-1 vom 2024-10-28
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019680.html
• openSUSE Security Update OPENSUSE-SU-2024:14430-1 vom 2024-10-28
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SYTPGEX77JK2ZE34EQ72QVIKUVEAF7IU/
• openSUSE Security Update OPENSUSE-SU-2024:14430-1 vom 2024-10-28
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SYTPGEX77JK2ZE34EQ72QVIKUVEAF7IU/
• SUSE Security Update SUSE-SU-2024:3879-1 vom 2024-11-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/CYC3GYOATETEOWR4CO3DCVGAFSZNMZ2L/
• Red Hat Security Advisory RHSA-2024:10979 vom 2024-12-12
  https://access.redhat.com/errata/RHSA-2024:10979
• Red Hat Security Advisory RHSA-2024:10980 vom 2024-12-12
  https://access.redhat.com/errata/RHSA-2024:10980
• Red Hat Security Advisory RHSA-2024:10978 vom 2024-12-12
  https://access.redhat.com/errata/RHSA-2024:10978
• openSUSE Security Update OPENSUSE-SU-2024:14455-1 vom 2024-11-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XOVJMCY4KA267OTEHQVHGXZYG3ZDFHLF/
• openSUSE Security Update OPENSUSE-SU-2024:14455-1 vom 2024-11-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XOVJMCY4KA267OTEHQVHGXZYG3ZDFHLF/
• openSUSE Security Update OPENSUSE-SU-2024:14456-1 vom 2024-11-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WTLWSKEJY5ZQSVBIFJAPHI42KG6XZRAO/
• openSUSE Security Update OPENSUSE-SU-2024:14456-1 vom 2024-11-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WTLWSKEJY5ZQSVBIFJAPHI42KG6XZRAO/
• Fedora Security Advisory FEDORA-2024-0BEBAFF45F vom 2024-11-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-0bebaff45f
• Fedora Security Advisory FEDORA-2024-C8CC025262 vom 2024-11-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c8cc025262
• Fedora Security Advisory FEDORA-2024-126C4F06A8 vom 2024-11-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-126c4f06a8
• SUSE Security Update SUSE-SU-2024:3929-1 vom 2024-11-06
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019784.html
• SUSE Security Update SUSE-SU-2024:3924-1 vom 2024-11-06
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019780.html
• SUSE Security Update SUSE-SU-2024:3924-1 vom 2024-11-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ORM7QFUKRORP5YWK4ZBFSLO45W4UPGW/
• SUSE Security Update SUSE-SU-2024:3944-1 vom 2024-11-07
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019793.html
• SUSE Security Update SUSE-SU-2024:3945-1 vom 2024-11-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/MFKFWFVCLIMW5XPWA7YGMFNK5QUPKQR5/
• SUSE Security Update SUSE-SU-2024:3957-1 vom 2024-11-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZVU4GXPDKJXUYC6OUNQMUV3GS5CSLZUW/
• SUSE Security Update SUSE-SU-2024:3958-1 vom 2024-11-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NMKDL7ELCE2AUAMUPUDRBQIGC5ZXKERJ/
• SUSE Security Update SUSE-SU-2024:3959-1 vom 2024-11-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/OIQL644LJLCZFSCUT4S6BJHBK6TLJDIJ/
• Fedora Security Advisory FEDORA-2024-D7E2D109E2 vom 2024-11-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d7e2d109e2
• Fedora Security Advisory FEDORA-2024-E6B1E638D1 vom 2024-11-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e6b1e638d1
• Ubuntu Security Notice USN-7116-1 vom 2024-11-19
  https://ubuntu.com/security/notices/USN-7116-1
• Debian Security Advisory DLA-3980 vom 2024-12-02
  https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html
• Fedora Security Advisory FEDORA-2024-01D838D947 vom 2024-12-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-01d838d947
• Red Hat Security Advisory RHSA-2024:10779 vom 2024-12-04
  https://access.redhat.com/errata/RHSA-2024:10779
• Fedora Security Advisory FEDORA-2024-D5CB18C4D8 vom 2024-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d5cb18c4d8
• Fedora Security Advisory FEDORA-2024-73E93894EB vom 2024-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-73e93894eb
• Fedora Security Advisory FEDORA-2024-607A0047BC vom 2024-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-607a0047bc
• Fedora Security Advisory FEDORA-2024-5EA38DFB80 vom 2024-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-5ea38dfb80
• Fedora Security Advisory FEDORA-2024-47E4624C89 vom 2024-12-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-47e4624c89
• Fedora Security Advisory FEDORA-2024-3F975B9C0E vom 2024-12-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3f975b9c0e
• Fedora Security Advisory FEDORA-2024-5653A86C5A vom 2024-12-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-5653a86c5a
• Oracle Linux Security Advisory ELSA-2024-10779 vom 2024-12-05
  https://linux.oracle.com/errata/ELSA-2024-10779.html
• Fedora Security Advisory FEDORA-2024-82A696CA59 vom 2024-12-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-82a696ca59
• Fedora Security Advisory FEDORA-2024-C403D16DCE vom 2024-12-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c403d16dce
• Fedora Security Advisory FEDORA-2024-39F0CCFBC3 vom 2024-12-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-39f0ccfbc3
• Fedora Security Advisory FEDORA-2024-1A493ABC67 vom 2024-12-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1a493abc67
• Fedora Security Advisory FEDORA-2024-CAE0BCC133 vom 2024-12-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-cae0bcc133
• Fedora Security Advisory FEDORA-2024-BE6EA1CE44 vom 2024-12-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-be6ea1ce44
• Fedora Security Advisory FEDORA-2024-3C18FE0D93 vom 2024-12-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3c18fe0d93
• IBM Security Bulletin 7182192 vom 2025-01-31
  https://www.ibm.com/support/pages/node/7182192
• Red Hat Security Advisory RHSA-2025:1413 vom 2025-02-13
  https://access.redhat.com/errata/RHSA-2025:1413
• Ubuntu Security Notice USN-7348-1 vom 2025-03-12
  https://ubuntu.com/security/notices/USN-7348-1
• Ubuntu Security Notice USN-7348-2 vom 2025-03-24
  https://ubuntu.com/security/notices/USN-7348-2
• IBM Security Bulletin 7185453 vom 2025-03-29
  https://www.ibm.com/support/pages/node/7185453
• Amazon Linux Security Advisory ALAS-2025-2815 vom 2025-04-02
  https://alas.aws.amazon.com/AL2/ALAS-2025-2815.html
• SUSE Security Update SUSE-SU-2025:02074-1 vom 2025-06-24
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021627.html
• Amazon Linux Security Advisory ALAS-2025-2817 vom 2025-04-07
  https://alas.aws.amazon.com/AL2/ALAS-2025-2817.html
• NetApp Security Advisory NTAP-20250425-0006 vom 2025-04-25
  https://security.netapp.com/advisory/ntap-20250425-0006/
• Ubuntu Security Notice USN-7488-1 vom 2025-05-06
  https://ubuntu.com/security/notices/USN-7488-1
• IBM Security Bulletin 7233394 vom 2025-05-14
  https://www.ibm.com/support/pages/node/7233394
• SUSE Security Update SUSE-SU-2025:20154-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021184.html
• SUSE Security Update SUSE-SU-2025:20374-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021414.html
• Security Update for Dell PowerProtect Data Domain
  https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
• Dell Security Update vom 2025-10-02
  https://www.dell.com/support/kbdoc/000376224
• Dell Security Advisory DSA-2025-404 vom 2025-10-31
  https://www.dell.com/support/kbdoc/000385435