Fixed packages 39
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-distro | 0:1.4.0-2.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docs | 0:3.6.7-2.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docutils | 0:0.14-12.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose | 0:1.3.7-31.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose-docs | 0:1.3.7-31.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pygments | 0:2.2.0-22.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo-debuginfo | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo-debugsource | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo-doc | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy | 0:1.3.2-3.module+el8.10.0+20981+3704b446 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy-doc | 0:1.3.2-3.module+el8.10.0+20981+3704b446 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-virtualenv | 0:15.1.0-23.module+el8.10.0+22619+61b70790 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-virtualenv-doc | 0:15.1.0-23.module+el8.10.0+22619+61b70790 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-wheel | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-bson | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-bson-debuginfo | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-distro | 0:1.4.0-2.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-docs | 0:3.6.7-2.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-docutils | 0:0.14-12.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-nose | 0:1.3.7-31.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pygments | 0:2.2.0-22.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pymongo | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pymongo-debuginfo | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pymongo-gridfs | 0:3.7.0-1.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-PyMySQL | 0:0.10.1-2.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-scipy | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-scipy-debuginfo | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-sqlalchemy | 0:1.3.2-3.module+el8.10.0+20981+3704b446 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-virtualenv | 0:15.1.0-23.module+el8.10.0+22619+61b70790 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-wheel | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-wheel-wheel | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36-debug | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36-devel | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36-rpm-macros | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy-debugsource | 0:1.0.0-21.module+el8.10.0+20784+edafcd43 |
Vulnerabilities 1
-
High 8.4
virtualenv allows command injection through activation scripts for a virtual environment
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2328554
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10953.json
-
report
https://access.redhat.com/security/cve/CVE-2024-53899
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-53899
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-53899
-
article
https://github.com/pypa/virtualenv/issues/2768
-
article
https://github.com/pypa/virtualenv/pull/2771
-
article
https://github.com/pypa/virtualenv/releases/tag/20.26.6