CLSA-2026-1792629041
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792629041.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792629041
- Upstream
- Published
- 2026-10-22T00:30:53Z
- Modified
- 2026-10-26T09:31:57Z
- Summary
- python-virtualenv: Fix of 4 CVEs
- Details
-
- Additional fix for CVE-2024-53899: substitute the activation script placeholders in one pass, so a placeholder name inside a path cannot break the quoting
- Additional fix for CVE-2024-53899: keep the environment name from running as a command from the shell prompt in bash, POSIX-mode bash and zsh
- Additional fix for CVE-2024-53899: quote the activate.fish values for fish, so a backslash before a quote cannot end the literal
- References