HCE2-SA-2025-0100 Important HCE 2.0 Security Fix(es): A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/bin/activate"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren_x27;t activated before being used (ie "./venv/bin/python") are not affected. (CVE-2024-9287) HCE 2.0 python3-3.9.9-7.r31.hce2.aarch64.rpm python3-devel-3.9.9-7.r31.hce2.aarch64.rpm python3-help-3.9.9-7.r31.hce2.noarch.rpm python3-unversioned-command-3.9.9-7.r31.hce2.aarch64.rpm python3-3.9.9-7.r31.hce2.x86_64.rpm python3-devel-3.9.9-7.r31.hce2.x86_64.rpm python3-unversioned-command-3.9.9-7.r31.hce2.x86_64.rpm