RLSA-2024:10978
Important: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
-
python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
-
python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
What each source reports
OSV No score
Important: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
-
python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
-
python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:10978- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python3.12Rocky Linux:9 |
before 0:3.12.5-2.el9_5.2 | 0:3.12.5-2.el9_5.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RLSA-2024:10978 is a vulnerability with no CVSS score yet in python3.12, published March 17, 2025. No source lists public exploit code. Fixed in python3.12 0:3.12.5-2.el9_5.2.