[CLSA-2026:1793908477] python-virtualenv: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-05 19:54:51 UTC
Description:
- CVE-2026-113725: escape the environment name for both bash PS1 expansion passes (fixed by CVE-2026-113723.patch, upstream 5f48d71173) - CVE-2026-113726: keep the environment name from running from the zsh PROMPT_SUBST prompt (fixed by CVE-2026-113723.patch, upstream 5b915367da)
CVEs fixed:
Updated packages:
  • python-virtualenv-15.1.0-4.amzn2.tuxcare.els3.noarch.rpm
    sha:aeb56716595ef200b2b88b39d698d4783ee911dbb4d1647469522a1f7b9c0b50
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.