155 matches found
Security update for python-virtualenv (important)
openSUSE security update: security update for python-virtualenv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22100-1 Rating: important References: bsc1283890 bsc1283904 Cross-References: CVE-2026-102930 CVE-2026-102938 CVSS scores: CVE-2026-10293...
python36:3.6 security update
python36 3.6.8-39 - Provide /usr/bin/python3 explicitly - Resolves: RHEL-2113 python-distro 1.4.0-2 - Port from Fedora to RHEL8, part of the python36 module - Resolves: rhbz1678920 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils...
SUSE SLED15 / SLES15 Security Update : python-virtualenv (SUSE-SU-2026:4652-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4652-1 advisory. - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. ...
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection bsc1283890. Patch Instruction...
SUSE-SU-2026:4652-1 Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering bsc1283904. - CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection bsc1283890...
CVE-2026-102930 affecting package python-virtualenv for versions less than 20.36.1-7
CVE-2026-102930 affecting package python-virtualenv for versions less than 20.36.1-7. A patched version of the package is available...
CVE-2026-102925 affecting package python-virtualenv for versions less than 20.36.1-7
CVE-2026-102925 affecting package python-virtualenv for versions less than 20.36.1-7. A patched version of the package is available...
CentOS Linux 7 [TuxCare] Security Update: python-virtualenv (CENTOS7:CLSA-2026:1771855894)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1771855894 advisory. - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not...
Rocky Linux 8.6 [CIQ] Security Update: python2-virtualenv Multiple Vulnerabilities (ciqsa-2026_0195)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260195 advisory. This advisory aggregates security fixes for the python-virtualenv SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-4506...
CentOS Linux 7.9 [CIQ] Security Update: python-virtualenv (ciqsa-2026_0733)
The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260733 advisory. This advisory aggregates security fixes for the python-virtualenv SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-53899. Tenable has extracted the...
AZL-105672 CVE-2026-102938 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write writes prompt values verbatim to the line-oriented pyvenv.cfg format while PyEnvCfg.readvalues parses the file with str.splitlines and accepts the last value for duplicate keys. An attacker wh...
AZL-105666 CVE-2026-102937 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote returns prompt text unchanged before activate.bat inserts it into a cmd.exe set "VAR=value" statement. An attacker who influences --prompt, VIRTUALENVPROMPT, or the corresponding...
AZL-105675 CVE-2026-102925 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...
AZL-105669 CVE-2026-102930 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the embedded wheels'...
AZL-105678 CVE-2026-97687 affecting package python-virtualenv 20.36.1-6
urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...
EulerOS Virtualization 2.11.1 : python-virtualenv (EulerOS-SA-2026-3469)
According to the versions of the python-virtualenv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU...
EulerOS Virtualization 2.11.0 : python-virtualenv (EulerOS-SA-2026-3556)
According to the versions of the python-virtualenv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU...
CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6
CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6. A patched version of the package is available...
virtualenv Synchronization DoS
The vulnerability of the tool for creating isolated virtual environments in Python virtualenv is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
