Release date:
2026-11-06 16:31:00 UTC
Description:
- Additional fix for CVE-2024-53899: substitute the activation script
placeholders in one pass, so a placeholder name inside a path cannot break
the quoting
- Additional fix for CVE-2024-53899: keep the environment name from running
as a command from the shell prompt in bash, POSIX-mode bash and zsh
- Additional fix for CVE-2024-53899: quote the activate.fish values for fish,
so a backslash before a quote cannot end the literal
Updated packages:
-
python-virtualenv-15.1.0-7.0.1.el7_9.tuxcare.els2.noarch.rpm
sha:8b4bc94886ce446b7193e394c6df74abb65e5eea7ab0feb36da40fbddacd97cf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
