1562 matches found
AZL-85265 CVE-2026-6357 affecting package python-virtualenv for versions less than 20.36.1-4
pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run...
SUSE-SU-2026:1525-1 Security update 5.1.3 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: CVE-2026-31958: Security patch for Salt vendored tornado: Added limits on multipart form data parsing bsc1259554 - Added x8664v2 as a possible rpm package architecture - Make users with backslash working for salt-s...
SUSE-SU-2026:1521-1 Security update 5.1.3 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 Updated translation strings venv-salt-minion: - Security issues fixed: CVE-2026-31958: Security patch for Salt vendored...
Security update 5.1.3 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apacheexporter: Internal changes to fix build issues with no impact for customers spacecmd: Version 5.1.13-0 Updated translation strings uyuni-tools: Version 5.1.26-0 Fixed applying PTF with images from RPMs bsc1252548 Ssl Key file...
AZL-83432 CVE-2026-3219 affecting package python-virtualenv for versions less than 20.36.1-4
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.26.6-3
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.26.6-3. A patched version of the package is available...
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.26.6-3
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.26.6-3. A patched version of the package is available...
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1)
The version of AOS installed on the remote host is prior to 7.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library...
Security Bulletin: IBM Edge Data Collector uses virtualenv-20.26.6-py3-none-any.whl which is vulnerable to CVE-2026-22702.
Summary IBM Edge Data Collector uses virtualenv-20.26.6-py3-none-any.whl which is vulnerable to CVE-2026-22702. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-22702 DESCRIPTION: virtualenv is a tool for creating isolated virtual python...
CVE-2026-22702 affecting package python-virtualenv for versions less than 20.36.1-1
CVE-2026-22702 affecting package python-virtualenv for versions less than 20.36.1-1. An upgraded version of the package is available that resolves this issue...
EulerOS 2.0 SP13 : python-virtualenv (EulerOS-SA-2026-1260)
According to the versions of the python-virtualenv package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use...
EulerOS 2.0 SP13 : python-virtualenv (EulerOS-SA-2026-1296)
According to the versions of the python-virtualenv package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use...
Huawei EulerOS: Security Advisory for python-virtualenv (EulerOS-SA-2026-1296)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-virtualenv (EulerOS-SA-2026-1260)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Time-of-Check to Time-of-Use in virtualenv [CVE-2026-22702]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Time-of-Check to Time-of-Use in virtualenv, caused by flaws which allow local attackers to perform symlink-based attacks on directory creation operations. CVE-2026-22702. virtualenv is used in our java microservices. This...