[CLSA-2026:1792629147] python-virtualenv: Fix of 3 CVEs
Type:
security
Severity:
Low
Release date:
2026-10-22 00:32:37 UTC
Description:
- Additional fix for CVE-2024-53899: substitute the activation script placeholders in one pass, so a placeholder name inside a path cannot break the quoting - Additional fix for CVE-2024-53899: keep the environment name from running as a command from the shell prompt in bash, POSIX-mode bash and zsh - Additional fix for CVE-2024-53899: quote the activate.fish values for fish, so a backslash before a quote cannot end the literal
Updated packages:
  • python-virtualenv-15.1.0-7.0.1.el7_9.tuxcare.els2.noarch.rpm
    sha:3da4861f773fa12ad9bfdcad8c57a572f907646d6030cb56ca462f4108d7d123
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.