A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/bin/activate"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie "./venv/bin/python") are not affected.
{
"binaries": [
{
"binary_name": "idle-python3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "libpython3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "libpython3.8-dev",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "libpython3.8-minimal",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "libpython3.8-stdlib",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "libpython3.8-testsuite",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "python3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "python3.8-dev",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "python3.8-examples",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "python3.8-full",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "python3.8-minimal",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
},
{
"binary_name": "python3.8-venv",
"binary_version": "3.8.10-0ubuntu1~20.04.16"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "idle-python3.10",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "libpython3.10",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "libpython3.10-dev",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "libpython3.10-minimal",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "libpython3.10-stdlib",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "libpython3.10-testsuite",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10-dev",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10-examples",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10-full",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10-minimal",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10-nopie",
"binary_version": "3.10.12-1~22.04.7"
},
{
"binary_name": "python3.10-venv",
"binary_version": "3.10.12-1~22.04.7"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "idle-python3.12",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "libpython3.12-dev",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "libpython3.12-minimal",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "libpython3.12-stdlib",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "libpython3.12-testsuite",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "libpython3.12t64",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12-dev",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12-examples",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12-full",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12-minimal",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12-nopie",
"binary_version": "3.12.3-1ubuntu0.3"
},
{
"binary_name": "python3.12-venv",
"binary_version": "3.12.3-1ubuntu0.3"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "idle-python3.4",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "libpython3.4",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "libpython3.4-dev",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "libpython3.4-minimal",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "libpython3.4-stdlib",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "libpython3.4-testsuite",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "python3.4",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "python3.4-dev",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "python3.4-examples",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "python3.4-minimal",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
},
{
"binary_name": "python3.4-venv",
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm14"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "libpython3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "libpython3.5-dev",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "libpython3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "libpython3.5-stdlib",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "libpython3.5-testsuite",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "python3.5-dev",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "python3.5-examples",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "python3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
},
{
"binary_name": "python3.5-venv",
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm4"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "libpython3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "libpython3.5-dev",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "libpython3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "libpython3.5-stdlib",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "libpython3.5-testsuite",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "python3.5",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "python3.5-dev",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "python3.5-examples",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "python3.5-minimal",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
},
{
"binary_name": "python3.5-venv",
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm16"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.6",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "libpython3.6",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "libpython3.6-dev",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "libpython3.6-minimal",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "libpython3.6-stdlib",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "libpython3.6-testsuite",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "python3.6",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "python3.6-dev",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "python3.6-examples",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "python3.6-minimal",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
},
{
"binary_name": "python3.6-venv",
"binary_version": "3.6.9-1~18.04ubuntu1.13+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.7",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "libpython3.7",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "libpython3.7-dev",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "libpython3.7-minimal",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "libpython3.7-stdlib",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "libpython3.7-testsuite",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "python3.7",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "python3.7-dev",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "python3.7-examples",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "python3.7-minimal",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
},
{
"binary_name": "python3.7-venv",
"binary_version": "3.7.5-2ubuntu1~18.04.2+esm4"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "libpython3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "libpython3.8-dev",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "libpython3.8-minimal",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "libpython3.8-stdlib",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "libpython3.8-testsuite",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "python3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "python3.8-dev",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "python3.8-examples",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "python3.8-minimal",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
},
{
"binary_name": "python3.8-venv",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm3"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "libpython3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "libpython3.9-dev",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "libpython3.9-minimal",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "libpython3.9-stdlib",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "libpython3.9-testsuite",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "python3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "python3.9-dev",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "python3.9-examples",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "python3.9-full",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "python3.9-minimal",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
},
{
"binary_name": "python3.9-venv",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm3"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "idle-python3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "libpython3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "libpython3.11-dev",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "libpython3.11-minimal",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "libpython3.11-stdlib",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "libpython3.11-testsuite",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11-dev",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11-examples",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11-full",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11-minimal",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11-nopie",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
},
{
"binary_name": "python3.11-venv",
"binary_version": "3.11.0~rc1-1~22.04.1~esm2"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}