[CLSA-2026:1792633045] python-virtualenv: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-22 01:37:37 UTC
Description:
- Additional fix for CVE-2024-53899: substitute the activation script placeholders in one pass, so a placeholder name inside a path cannot break the quoting - Additional fix for CVE-2024-53899: keep the environment name from running as a command from the shell prompt in bash, POSIX-mode bash and zsh - Additional fix for CVE-2024-53899: quote the activate.fish values for fish, so a backslash before a quote cannot end the literal
Updated packages:
  • python-virtualenv-15.1.0-7.0.1.el7_9.tuxcare.els2.noarch.rpm
    sha:3459a4384a759940ea8116e3af9eca239505599c75cd40b5e9a2596154cdab27
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.