[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-virtualenv issue
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Jan 10 13:28:03 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2cea01c8 by Salvatore Bonaccorso at 2026-01-10T14:26:00+01:00
Add Debian bug reference for python-virtualenv issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2026-22703 (Cosign provides code signing and transparency for containers and
NOTE: Fixed by: https://github.com/sigstore/cosign/commit/6832fba4928c1ad69400235bbc41212de5006176 (v3.0.4)
NOTE: Fixed by: https://github.com/sigstore/cosign/commit/3ade80c5f77cefc904f8c994e88618e5892e8f1c (v2.6.2)
CVE-2026-22702 (virtualenv is a tool for creating isolated virtual python environments ...)
- - python-virtualenv <unfixed>
+ - python-virtualenv <unfixed> (bug #1125191)
NOTE: https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986
NOTE: https://github.com/pypa/virtualenv/pull/3013
NOTE: Fixed by; https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc (20.36.1)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2cea01c86f250aea736b2e890b94cb039cba3fdf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2cea01c86f250aea736b2e890b94cb039cba3fdf
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260110/8f934ed4/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list