Description
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $(...) runs as commands in the user's shell each time bash draws the prompt. This issue is fixed in version 21.14.7.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 pypi | | | 21.14.7 |
 debian 12 | | =20.17.1+ds-1 || =20.19.0+ds-1 || =20.21.0+ds-1 || =20.23.0+ds-1 || =20.23.0+ds-2 || =20.24.1+ds-1 || =20.24.6+ds-1 || =20.24.6+ds-2 || =20.25.0+ds-1 || =20.25.0+ds-2 || =20.25.1+ds-1 || =20.26.1+ds-1 || =20.26.2+ds-1 || =20.26.6+ds-1 || =20.27.0+ds-1 || =20.28.0+ds-1 || =20.29.1+ds-1 || =20.29.3+ds-1 || =20.30.0+ds-1 || =20.30.0+ds-2 || =20.30.0+ds-3 || =20.31.2+ds-1 || =20.33.1+ds-1 || =20.34.0+ds-1 || =20.35.3+ds-1 || =20.35.4+ds-1 || =20.36.1+ds-1 || =20.38.0+ds-1 || =21.2.0+ds-1 || =21.2.4+ds-1 || =21.3.1+ds-1 || =21.4.1+ds-1 || =21.5.1+ds-1 | - |
debian 13 | | =20.31.2+ds-1 || =20.31.2+ds-1+deb13u1 || =20.33.1+ds-1 || =20.34.0+ds-1 || =20.35.3+ds-1 || =20.35.4+ds-1 || =20.36.1+ds-1 || =20.38.0+ds-1 || =21.2.0+ds-1 || =21.2.4+ds-1 || =21.3.1+ds-1 || =21.4.1+ds-1 || =21.5.1+ds-1 | - |
debian 14 | | =20.31.2+ds-1 || =20.33.1+ds-1 || =20.34.0+ds-1 || =20.35.3+ds-1 || =20.35.4+ds-1 || =20.36.1+ds-1 || =20.38.0+ds-1 || =21.2.0+ds-1 || =21.2.4+ds-1 || =21.3.1+ds-1 || =21.4.1+ds-1 || =21.5.1+ds-1 | - |
