-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Jan 2026 21:08:14 -0400 Source: python-virtualenv Architecture: source Version: 20.36.1+ds-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Stefano Rivera <stefanor@debian.org> Closes: 1125191 Changes: python-virtualenv (20.36.1+ds-1) unstable; urgency=medium . * New upstream release. - Fixes CVE-2026-22702: TOCTOU symlink-based attacks on directory creation. (Closes: #1125191) * Bump Standards-Version to 4.7.3, dropping the Priority field. Checksums-Sha1: 370a953b64d72379c085c88c81aeea479993d380 1992 python-virtualenv_20.36.1+ds-1.dsc 38e720988f79f73954c107a0aae7c04894d0ed1e 113340 python-virtualenv_20.36.1+ds.orig.tar.xz eff7a74e86f290b19ee0e5aa9333bcd07bf07047 15704 python-virtualenv_20.36.1+ds-1.debian.tar.xz d9d8f807ae8014c2ea47b7b02502ebc031c434dd 5585 python-virtualenv_20.36.1+ds-1_source.buildinfo Checksums-Sha256: ba33ba973bebf90d9ad21723f518f527516dc7ddd9f86594484e46fbbef2fab7 1992 python-virtualenv_20.36.1+ds-1.dsc 7c7354598912d86ba16029a69a9ea89f024f4f13a6a3097ce3c1d35bcaee6682 113340 python-virtualenv_20.36.1+ds.orig.tar.xz ed520cf8a45c33b2cbf07a399535cfc8e0cd3a50351a68f4e03ee32dffe60ab7 15704 python-virtualenv_20.36.1+ds-1.debian.tar.xz f421ac4ceb5c86f6022ba41ed20869725806b44eb40d4376c86aa1df732005c7 5585 python-virtualenv_20.36.1+ds-1_source.buildinfo Files: 55c315649cd929fa6483c6c6c462329d 1992 python optional python-virtualenv_20.36.1+ds-1.dsc 03809ff417fb299dc895dbace9664c3b 113340 python optional python-virtualenv_20.36.1+ds.orig.tar.xz 7fd8fe229316356c3090be580f72d23d 15704 python optional python-virtualenv_20.36.1+ds-1.debian.tar.xz 6ef6aa5395a8a7093a638798d2fea09f 5585 python optional python-virtualenv_20.36.1+ds-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCaWOEbRQcc3RlZmFub3JA ZGViaWFuLm9yZwAKCRBHew2wJjpU2FqiAPoC5Q1DaQGtoPHXNmBUg9YKgGYIZRcS AyMp4STzqsEPkwEAppOLO/YlzmKIDczvvxn2KKc7hel6oFka+sVNKTASFAk= =B97g -----END PGP SIGNATURE-----