HCE3-SA-2025-0145
An update for python-virtualenv is now available for HCE 3.0
Important
HCE 3.0
Security Fix(es):
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287. (CVE-2024-53899)
HCE 3.0
python3-virtualenv-20.26.6-1.r4.hce3.noarch.rpm