AZL-110115 CVE-2026-113725 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the...

AZL-112586 CVE-2026-113717 affecting package python-virtualenv 20.36.1-10

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.getpipinstallcmd handles --seeder pip --download by calling getwheeldownload=False and then allowing pip to consult the configured index, bypassing virtualenv's downloadwheel and verifywheeldigest...

AZL-110121 CVE-2026-113719 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall.uninstallpreviousversion accepts existing seed-package metadata and uninstalldist joins entries from toplevel.txt and RECORD to site-packages without checking containment. When a reused destinatio...

AZL-110097 CVE-2026-113723 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and dr...

AZL-110112 CVE-2026-113722 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer...

AZL-110118 CVE-2026-113720 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...

AZL-110124 CVE-2026-113721 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator.generate removes an existing output only when Path.exists is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write opens pyvenv.cfg...

AZL-110094 CVE-2026-113716 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensuredir for executable, library, and package directories, and ensuredir accepts an existing symlink to a directory because exists follows it. Interpreter creation, seed...

AZL-110109 CVE-2026-113715 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...

AZL-112583 CVE-2026-113714 affecting package python-virtualenv 20.36.1-10

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, downloadwheel writes package-index downloads directly into the reusable wheel/house cache before selecting a verification target from pip's textual Saved output. With default-index digest comparison enabled,...

AZL-110103 CVE-2026-113713 affecting package python-virtualenv 20.36.1-9

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappda...

CLSA-2026-1792510471 python-virtualenv: Fix of 2 CVEs

Additional fix for CVE-2024-53899: quote the activate.csh values for csh, so a backslash before a quote cannot end the literal under tcsh's backslashquote and a ! cannot trigger history expansion...

openSUSE 16 Security Update : python-virtualenv (openSUSE-SU-2026:22100-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22100-1 advisory. - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. - CVE-2026-102938: crafted prompt...

Security update for python-virtualenv (important)

openSUSE security update: security update for python-virtualenv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22100-1 Rating: important References: bsc1283890 bsc1283904 Cross-References: CVE-2026-102930 CVE-2026-102938 CVSS scores: CVE-2026-10293...

SUSE SLED15 / SLES15 Security Update : python-virtualenv (SUSE-SU-2026:4652-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4652-1 advisory. - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. ...

python36:3.6 security update

python36 3.6.8-39 - Provide /usr/bin/python3 explicitly - Resolves: RHEL-2113 python-distro 1.4.0-2 - Port from Fedora to RHEL8, part of the python36 module - Resolves: rhbz1678920 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils...

SUSE-SU-2026:24243-1 Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. - CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection bsc1283890...

OPENSUSE-SU-2026:22100-1 Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. - CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection bsc1283890...

Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection bsc1283890. Patch Instruction...

SUSE-SU-2026:4652-1 Security update for python-virtualenv

This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. - CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection bsc1283890...