Fixed packages 39
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-distro | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-docs | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-docutils | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-nose | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-nose-docs | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-pygments | 0:2.2.0-22.module+el8.5.0+10789+e4939b94 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-pymongo | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-pymongo-debuginfo | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-pymongo-debugsource | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-pymongo-doc | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-PyMySQL | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-sqlalchemy | 0:1.3.2-2.module+el8.8.0+20977+39d98680.1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-sqlalchemy-doc | 0:1.3.2-2.module+el8.8.0+20977+39d98680.1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-virtualenv | 0:15.1.0-22.module+el8.8.0+22625+4a966c0c.1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-virtualenv-doc | 0:15.1.0-22.module+el8.8.0+22625+4a966c0c.1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python-wheel | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-bson | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-bson-debuginfo | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-distro | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-docs | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-docutils | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-nose | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-pygments | 0:2.2.0-22.module+el8.5.0+10789+e4939b94 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-pymongo | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-pymongo-debuginfo | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-pymongo-gridfs | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-PyMySQL | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-scipy | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-scipy-debuginfo | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-sqlalchemy | 0:1.3.2-2.module+el8.8.0+20977+39d98680.1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-virtualenv | 0:15.1.0-22.module+el8.8.0+22625+4a966c0c.1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-wheel | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python3-wheel-wheel | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python36 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python36-debug | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python36-devel | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | python36-rpm-macros | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | scipy | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | scipy-debugsource | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
Vulnerabilities 1
-
High 8.4
virtualenv allows command injection through activation scripts for a virtual environment
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2328554
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11093.json
-
report
https://access.redhat.com/security/cve/CVE-2024-53899
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-53899
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-53899
-
article
https://github.com/pypa/virtualenv/issues/2768
-
article
https://github.com/pypa/virtualenv/pull/2771
-
article
https://github.com/pypa/virtualenv/releases/tag/20.26.6