Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -8 articles for you...
172

Ubuntu 24.10: USN-7116-1 high: Python code execution issue

Python could be made to run programs when activating virtual environments.. ========================================================================== Ubuntu Security Notice USN-7116-1 November 19, 2024 python3.10, python3.12, python3.8 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Python could be made to run programs when activating virtual environments. Software Description: - python3.12: An interactive high-level object-oriented language - python3.10: An interactive high-level object-oriented language - python3.8: An interactive high-level object-oriented language Details: It was discovered that Python incorrectly handled quoting path names when using the venv module. A local attacker able to control virtual environments could possibly use this issue to execute arbitrary code when the virtual environment is activated. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 python3.12 3.12.7-1ubuntu1 python3.12-minimal 3.12.7-1ubuntu1 Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.3 python3.12-minimal 3.12.3-1ubuntu0.3 Ubuntu 22.04 LTS python3.10 3.10.12-1~22.04.7 python3.10-minimal 3.10.12-1~22.04.7 Ubuntu 20.04 LTS python3.8 3.8.10-0ubuntu1~20.04.13 python3.8-minimal 3.8.10-0ubuntu1~20.04.13 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7116-1 CVE-2024-9287 Package Information: https://launchpad.net/ubuntu/+source/python3.12/3.12.7-1ubuntu1 https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.7 https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.13 . Python security flaws enable malicious users to run harmful code upon engaging virtual environments. It's crucial to update your system to bolster protection.. Python Security, Code Execution, Ubuntu Update. . LinuxSecurity.com Team

Calendar%202 Nov 19, 2024 Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here