Astra Linux – vulnerability in python3.11

A vulnerability has been found in the CPython venv module and its CLI. Path names provided when creating a virtual environment were not properly quoted, allowing attackers to inject commands into the virtual environment “activation” scripts e.g., “source venv/bin/activate”. As a result, virtual...