[Git][security-tracker-team/security-tracker][master] Addn new virtualenv issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15ffd7b4 by Salvatore Bonaccorso at 2026-10-22T22:33:02+02:00
Addn new virtualenv issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2990,7 +2990,9 @@ CVE-2026-113736 (A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03.
 CVE-2026-113735 (A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected  ...)
 	NOT-FOR-US: D-Link
 CVE-2026-113732 (virtualenv is a tool for creating isolated virtual python environments ...)
-	TODO: check
+	- python-virtualenv <unfixed>
+	NOTE: https://github.com/pypa/virtualenv/security/advisories/GHSA-c947-3pg5-gm8q
+	NOTE: Fixed by: https://github.com/pypa/virtualenv/commit/3bddeaf8d02c3ee7f576503efb082f8f494cfcab (21.14.2)
 CVE-2026-113731 (djust provides Phoenix LiveView-style reactive server-side rendering f ...)
 	NOT-FOR-US: djust
 CVE-2026-113730 (OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13,  ...)
@@ -3002,9 +3004,13 @@ CVE-2026-113728 (Bulwark Webmail is a self-hosted webmail client for Stalwart Ma
 CVE-2026-113727 (OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1. ...)
 	NOT-FOR-US: OpenChoreo
 CVE-2026-113726 (virtualenv is a tool for creating isolated virtual python environments ...)
-	TODO: check
+	- python-virtualenv <unfixed>
+	NOTE: https://github.com/pypa/virtualenv/security/advisories/GHSA-5vjq-rrrf-7h2q
+	NOTE: Fixed by: https://github.com/pypa/virtualenv/commit/5b915367da82bd024b2a0d28d2f98007034b4aa2 (21.14.4)
 CVE-2026-113725 (virtualenv is a tool for creating isolated virtual python environments ...)
-	TODO: check
+	- python-virtualenv <unfixed>
+	NOTE: https://github.com/pypa/virtualenv/security/advisories/GHSA-vxj4-q4g9-crj7
+	NOTE: Fixed by: https://github.com/pypa/virtualenv/commit/c3104e02474b652832a9bbaae79f6e1696296932 (21.14.7)
 CVE-2026-113724 (virtualenv is a tool for creating isolated virtual python environments ...)
 	TODO: check
 CVE-2026-113723 (virtualenv is a tool for creating isolated virtual python environments ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15ffd7b48d9c6960dfb091c1840c307e5ff3d047

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15ffd7b48d9c6960dfb091c1840c307e5ff3d047
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/b46cf7e3/attachment.htm>