openSUSE-SU-2026:22100-1
openSUSE-SU-2026:22100-1 · Security update for python-virtualenv
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python-virtualenv fixes the following issues: - CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). - CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection (bsc#1283890).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-virtualenv openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 20.29.3-160000.4.1
Update to 20.29.3-160000.4.1