Release date:
2026-10-22 00:30:53 UTC
Description:
- Additional fix for CVE-2024-53899: substitute the activation script
placeholders in one pass, so a placeholder name inside a path cannot break
the quoting
- Additional fix for CVE-2024-53899: keep the environment name from running
as a command from the shell prompt in bash, POSIX-mode bash and zsh
- Additional fix for CVE-2024-53899: quote the activate.fish values for fish,
so a backslash before a quote cannot end the literal
Updated packages:
-
python-virtualenv-15.1.0-7.0.1.el7_9.tuxcare.els2.noarch.rpm
sha:e8e8690695c819ef6a257b0e7837bedb1669231955d741ea825fba6b2f040f61
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
