Description
virtualenv allows command injection through activation scripts for a virtual environment
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 pypi | | | 20.26.6 |
 debian 12 | | =20.17.1+ds-1 || =20.19.0+ds-1 || =20.21.0+ds-1 || =20.23.0+ds-1 || =20.23.0+ds-2 || =20.24.1+ds-1 || =20.24.6+ds-1 || =20.24.6+ds-2 || =20.25.0+ds-1 || =20.25.0+ds-2 || =20.25.1+ds-1 || =20.26.1+ds-1 || =20.26.2+ds-1 || =20.26.6+ds-1 || =20.27.0+ds-1 || =20.28.0+ds-1 || =20.29.1+ds-1 || =20.29.3+ds-1 || =20.30.0+ds-1 || =20.30.0+ds-2 || =20.30.0+ds-3 || =20.31.2+ds-1 || =20.33.1+ds-1 || =20.34.0+ds-1 || =20.35.3+ds-1 || =20.35.4+ds-1 || =20.36.1+ds-1 || =20.38.0+ds-1 || =21.2.0+ds-1 || =21.2.4+ds-1 || =21.3.1+ds-1 || =21.4.1+ds-1 || =21.5.1+ds-1 | - |
debian 11 | | =20.10.0+ds-1 || =20.12.1+ds-1 || =20.13.0+ds-1 || =20.13.0+ds-2 || =20.14.0+ds-1 || =20.15.0+ds-1 || =20.16.3+ds-1 || =20.16.3+ds-2 || =20.16.3+ds-3 || =20.16.3+ds-4 || =20.16.3+ds-4.1 || =20.16.3+ds-5 || =20.16.6+ds-1 || =20.17.1+ds-1 || =20.19.0+ds-1 || =20.21.0+ds-1 || =20.23.0+ds-1 || =20.23.0+ds-2 || =20.24.1+ds-1 || =20.24.6+ds-1 || =20.24.6+ds-2 || =20.25.0+ds-1 || =20.25.0+ds-2 || =20.25.1+ds-1 || =20.26.1+ds-1 || =20.26.2+ds-1 || =20.26.6+ds-1 || =20.27.0+ds-1 || =20.28.0+ds-1 || =20.29.1+ds-1 || =20.29.3+ds-1 || =20.30.0+ds-1 || =20.30.0+ds-2 || =20.30.0+ds-3 || =20.31.2+ds-1 || =20.33.1+ds-1 || =20.34.0+ds-1 || =20.35.3+ds-1 || =20.35.4+ds-1 || =20.36.1+ds-1 || =20.38.0+ds-1 || =20.4.0+ds-2 || =20.4.0+ds-2+deb11u1 || =20.4.6+ds-1 || =20.4.6+ds-2 || =20.9.0+ds-1 || =21.2.0+ds-1 || =21.2.4+ds-1 || =21.3.1+ds-1 || =21.4.1+ds-1 || =21.5.1+ds-1 | - |
debian 13 | | | 20.26.6+ds-1 |
debian 14 | | | 20.26.6+ds-1 |
 rpm rhel7 | | - | - |
rpm rhel8 | | <0:3.6.8-39.module+el8.10.0+20784+edafcd43 | 0:3.6.8-39.module+el8.10.0+20784+edafcd43 |
rpm rhel8.8 | | <0:3.6.8-38.module+el8.5.0+12207+5c5719bc | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
