Release date:
2026-10-22 01:37:37 UTC
Description:
- Additional fix for CVE-2024-53899: substitute the activation script
placeholders in one pass, so a placeholder name inside a path cannot break
the quoting
- Additional fix for CVE-2024-53899: keep the environment name from running
as a command from the shell prompt in bash, POSIX-mode bash and zsh
- Additional fix for CVE-2024-53899: quote the activate.fish values for fish,
so a backslash before a quote cannot end the literal
Updated packages:
-
python-virtualenv-15.1.0-7.0.1.el7_9.tuxcare.els2.noarch.rpm
sha:3459a4384a759940ea8116e3af9eca239505599c75cd40b5e9a2596154cdab27
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.