Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-6288

Критический

ALT-PU-2025-6288: package python3-module-virtualenv update to version 20.30.0-alt0.p10.1

Источник
errata.altlinux.org
Дата публикации
27.05.2025
Дата обновления
04.02.2026
Устраненные уязвимости
2
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades python3-module-virtualenv to version 20.30.0-alt0.p10.1.

Устраненные уязвимости2

Ссылки2

ALT-PU-2025-6288https://errata.altlinux.org/ALT-PU-2025-6288

GHSA-rqc4-2hc7-8c8v

https://github.com/advisories/GHSA-rqc4-2hc7-8c8v

Связанные уязвимости

ubuntu логотип

CVE-2024-53899

CVSS3: 7.8
ubuntu
почти 2 года назад

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

redhat логотип

CVE-2024-53899

CVSS3: 7.8
redhat
почти 2 года назад

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

nvd логотип

CVE-2024-53899

CVSS3: 7.8
nvd
почти 2 года назад

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

msrc логотип

CVE-2024-53899

CVSS3: 8.4
msrc
почти 2 года назад

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

debian логотип

CVE-2024-53899

CVSS3: 7.8
debian
почти 2 года назад

virtualenv before 20.26.6 allows command injection through the activat ...