CVE-2026-113725 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113725 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113720 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113720 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113722 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113722 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113713 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113713 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113726 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113726 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113723 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113723 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113716 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113716 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113721 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113721 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113719 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113719 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113715 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113715 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113776 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113776 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-113732 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-113732 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

CVE-2026-102938 affecting package python-virtualenv for versions less than 20.36.1-9

CVE-2026-102938 affecting package python-virtualenv for versions less than 20.36.1-9. A patched version of the package is available...

Important: python-virtualenv

Issue Overview: virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the...

CLSA-2026-1792629147 python-virtualenv: Fix of 3 CVEs

Additional fix for CVE-2024-53899: substitute the activation script placeholders in one pass, so a placeholder name inside a path cannot break the quoting - Additional fix for CVE-2024-53899: keep the environment name from running as a command from the shell prompt in bash, POSIX-mode bash and...

CLSA-2026-1792629041 python-virtualenv: Fix of 4 CVEs

Additional fix for CVE-2024-53899: substitute the activation script placeholders in one pass, so a placeholder name inside a path cannot break the quoting - Additional fix for CVE-2024-53899: keep the environment name from running as a command from the shell prompt in bash, POSIX-mode bash and...

AZL-110091 CVE-2026-113732 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX shlex.quote even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or...

AZL-110106 CVE-2026-113776 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiatetemplate replaces placeholders one key at a time across the complete activation template, so trigger names such as VIRTUALNAME, VIRTUALENV, or VIRTUALPROMPT inside a...

AZL-110100 CVE-2026-113726 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASHVERSION is set, so zsh...

AZL-110115 CVE-2026-113725 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the...