diff --git a/python-virtualenv.changes b/python-virtualenv.changes
index 3213d0e..de0b865 100644
--- a/python-virtualenv.changes
+++ b/python-virtualenv.changes
@@ -1,13 +1,25 @@
+-------------------------------------------------------------------
+Thu Oct 17 15:15:49 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 20.26.6:
+  * Properly quote string placeholders in activation script
+    templates to mitigate potential command injection - by
+    @y5c4l3. (#2768, in the Python stdlib known as bsc#1232241,
+    CVE-2024-9287)
+  * Upgrade embedded wheels: setuptools to 75.1.0 from 74.1.2
+  * no longer create () output in console during activation of a
+    virtualenv by .bat file. (#2728)
+
 -------------------------------------------------------------------
 Tue Oct 15 05:34:07 UTC 2024 - Steve Kowalik <steven.kowalik@suse.com>
 
-- Inject setuptools-wheel and tell the testsuite where to find it. 
+- Inject setuptools-wheel and tell the testsuite where to find it.
 
 -------------------------------------------------------------------
 Sat Jun 29 12:43:58 UTC 2024 - Dirk Müller <dmueller@suse.com>
 
 - update to 20.26.3:
-  * Bump embeded wheels 
+  * Bump embeded wheels
 
 -------------------------------------------------------------------
 Mon Jun 10 08:58:41 UTC 2024 - Dirk Müller <dmueller@suse.com>
diff --git a/python-virtualenv.spec b/python-virtualenv.spec
index a5da880..71c0c29 100644
--- a/python-virtualenv.spec
+++ b/python-virtualenv.spec
@@ -27,7 +27,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-virtualenv%{psuffix}
-Version:        20.26.3
+Version:        20.26.6
 Release:        0
 Summary:        Virtual Python Environment builder
 License:        MIT
diff --git a/virtualenv-20.26.3.tar.gz b/virtualenv-20.26.3.tar.gz
deleted file mode 100644
index 1bf5f58..0000000
--- a/virtualenv-20.26.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4c43a2a236279d9ea36a0d76f98d84bd6ca94ac4e0f4a3b9d46d05e10fea542a
-size 9057588
diff --git a/virtualenv-20.26.6.tar.gz b/virtualenv-20.26.6.tar.gz
new file mode 100644
index 0000000..4f7880a
--- /dev/null
+++ b/virtualenv-20.26.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:280aede09a2a5c317e409a00102e7077c6432c5a38f0ef938e643805a7ad2c48
+size 9372482