alt-python314 (3.14.7-4) stable; urgency=medium

  * SECURITY UPDATE: urllib: scope HTTPPasswordMgr and
    HTTPPasswordMgrWithPriorAuth credentials by URL scheme, so credentials
    registered for an https URI are no longer sent to the http URI of the
    same host after a downgrade or redirect
    - CVE-2026-15806
  * SECURITY UPDATE: stringprep: pin every codepoint whose case mapping
    changed after Unicode 3.2.0 in b3_exceptions (regenerated for this
    interpreter's Unicode 16.0.0 database), so the idna codec no longer
    applies post-3.2.0 case folding that RFC 3454 forbids
    - CVE-2026-17084

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Thu, 24 Sep 2026 12:00:00 +0000

alt-python314 (3.14.7-3) stable; urgency=medium

  * SECURITY UPDATE: tarfile: honor a None result from the link-fallback
    filter call, so a custom filter that returns None for the renamed
    member no longer has its decision silently discarded
    - CVE-2026-87910
  * SECURITY UPDATE: tarfile: normalize member names that leave the
    destination and come back, so the tar and data filters no longer
    create intermediate directories outside the destination
    (upstream commit 97688346, test carried as merged)
    - CVE-2026-19672
    - Behaviour change: the tar and data filters now rewrite member names
      containing '..' with os.path.normpath(); this drops internal '..'
      components and may change the meaning of a name that traverses
      symbolic links.

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Tue, 22 Sep 2026 11:45:00 +0000

alt-python314 (3.14.7-2) stable; urgency=medium

  * ALTPYTH-615: rebuild against renamed alt-openssl11 (deb OpenSSL 1.1.1
    package renamed alt-openssl -> alt-openssl11, install prefix
    /opt/alt/openssl -> /opt/alt/openssl11)

 -- Nikolai Mardanov <nmardanov@cloudlinux.com>  Tue, 18 Aug 2026 11:42:35 +0400

alt-python314 (3.14.7-1) stable; urgency=medium

  * ALTPYTH-614: Update to 3.14.7 version
  * Drop 00474 imaplib patch: CVE-2025-15366 is fixed upstream in 3.14.7
  * Fix stale bundled pip version in the bootstrap-only Provides (24.2 -> 26.2.1)

 -- Levon Matshkalyan <lmatshkalyan@cloudlinux.com>  Thu, 06 Aug 2026 12:00:00 +0000

alt-python314 (3.14.6-1) stable; urgency=medium

  * Update to 3.14.6

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Wed, 10 Jun 2026 19:52:27 -0400

alt-python314 (3.14.5-1) stable; urgency=medium

  * ALTPYTH-603: Update to 3.14.5 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Sun, 10 May 2026 14:24:47 -0400

alt-python314 (3.14.4-1) stable; urgency=medium

  * ALTPYTH-599: Update to 3.14.4 version

 -- Razmik Manvelyan <rmanvelyan@cloudlinux.com>  Tue, 21 Apr 2026 00:00:00 +0000

alt-python314 (3.14.3-2) stable; urgency=medium

  * ALTPYTH-595: Build alt-python packages for Debian 12 and 13 on ARM

 -- Razmik Manvelyan <rmanvelyan@cloudlinux.com>  Fri, 27 Mar 2026 00:00:00 +0000

alt-python314 (3.14.3-1) stable; urgency=medium

  * ALTPYTH-587: Update to Python 3.14.3
  * Security: Fix CVE-2025-15366 (imaplib command injection)
  * Security: Fix CVE-2025-15367 (poplib command injection)

 -- Davit Sargsyan <dsargsyan@cloudlinux.com>  Tue, 17 Feb 2026 00:00:00 +0000
