-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 10 Jan 2026 21:08:14 -0400
Source: python-virtualenv
Architecture: source
Version: 20.36.1+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Stefano Rivera <stefanor@debian.org>
Closes: 1125191
Changes:
python-virtualenv (20.36.1+ds-1) unstable; urgency=medium
.
* New upstream release.
- Fixes CVE-2026-22702: TOCTOU symlink-based attacks on directory creation.
(Closes: #1125191)
* Bump Standards-Version to 4.7.3, dropping the Priority field.
Checksums-Sha1:
370a953b64d72379c085c88c81aeea479993d380 1992 python-virtualenv_20.36.1+ds-1.dsc
38e720988f79f73954c107a0aae7c04894d0ed1e 113340 python-virtualenv_20.36.1+ds.orig.tar.xz
eff7a74e86f290b19ee0e5aa9333bcd07bf07047 15704 python-virtualenv_20.36.1+ds-1.debian.tar.xz
d9d8f807ae8014c2ea47b7b02502ebc031c434dd 5585 python-virtualenv_20.36.1+ds-1_source.buildinfo
Checksums-Sha256:
ba33ba973bebf90d9ad21723f518f527516dc7ddd9f86594484e46fbbef2fab7 1992 python-virtualenv_20.36.1+ds-1.dsc
7c7354598912d86ba16029a69a9ea89f024f4f13a6a3097ce3c1d35bcaee6682 113340 python-virtualenv_20.36.1+ds.orig.tar.xz
ed520cf8a45c33b2cbf07a399535cfc8e0cd3a50351a68f4e03ee32dffe60ab7 15704 python-virtualenv_20.36.1+ds-1.debian.tar.xz
f421ac4ceb5c86f6022ba41ed20869725806b44eb40d4376c86aa1df732005c7 5585 python-virtualenv_20.36.1+ds-1_source.buildinfo
Files:
55c315649cd929fa6483c6c6c462329d 1992 python optional python-virtualenv_20.36.1+ds-1.dsc
03809ff417fb299dc895dbace9664c3b 113340 python optional python-virtualenv_20.36.1+ds.orig.tar.xz
7fd8fe229316356c3090be580f72d23d 15704 python optional python-virtualenv_20.36.1+ds-1.debian.tar.xz
6ef6aa5395a8a7093a638798d2fea09f 5585 python optional python-virtualenv_20.36.1+ds-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCaWOEbRQcc3RlZmFub3JA
ZGViaWFuLm9yZwAKCRBHew2wJjpU2FqiAPoC5Q1DaQGtoPHXNmBUg9YKgGYIZRcS
AyMp4STzqsEPkwEAppOLO/YlzmKIDczvvxn2KKc7hel6oFka+sVNKTASFAk=
=B97g
-----END PGP SIGNATURE-----
Attachment:
pgpdudbtIhynB.pgp
Description: PGP signature