alt-python310 (3.10.20-5) stable; urgency=medium

  * SECURITY UPDATE: quadratic-complexity CPU denial of service in html.parser
    - debian/patches/CVE-2026-15308.patch: accumulate incremental feed() data
      to avoid re-scanning/concatenating unterminated constructs quadratically
    - CVE-2026-15308

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Wed, 22 Jul 2026 09:00:00 +0000

alt-python310 (3.10.20-4) stable; urgency=medium

  * SECURITY UPDATE: webbrowser argument injection via action-token substitution
    - debian/patches/CVE-2026-4786.patch: validate expanded command (bypass of CVE-2026-4519)
    - CVE-2026-4786
  * SECURITY UPDATE: use-after-free in bz2/lzma decompressor reuse after MemoryError
    - debian/patches/CVE-2026-6100.patch: clear next_in on the decompress error path
    - CVE-2026-6100
  * SECURITY UPDATE: insufficient entropy for Expat hash-flooding protection
    - debian/patches/CVE-2026-7210.patch: use XML_SetHashSalt16Bytes 16-byte entropy
    - CVE-2026-7210
  * SECURITY UPDATE: insufficient entropy in bundled Expat (libexpat) hash-flooding protection
    - debian/patches/CVE-2026-41080.patch: backport XML_SetHashSalt16Bytes into the bundled expat so the CVE-2026-7210 16-byte salt path is not inert on bundled-expat builds
    - CVE-2026-41080
  * SECURITY UPDATE: stack buffer overflow via bz2 decompressor reuse after error
    - debian/patches/CVE-2026-9669.patch: refuse reuse after a previous error
    - CVE-2026-9669

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Mon, 20 Jul 2026 09:34:11 +0000

alt-python310 (3.10.20-3) stable; urgency=medium

  * SECURITY UPDATE: reject control characters in imaplib IMAP4 commands
    - debian/patches/CVE-2025-15366.patch: guard IMAP4._command()
    - CVE-2025-15366
  * SECURITY UPDATE: reject control characters in poplib POP3 commands
    - debian/patches/CVE-2025-15367.patch: guard POP3._putcmd()
    - CVE-2025-15367
  * SECURITY UPDATE: control-character injection via http.cookies paths
    - debian/patches/CVE-2026-3644.patch: guard Morsel.update()/|=/unpickle/js_output
    - CVE-2026-3644
  * SECURITY UPDATE: uncontrolled recursion in pyexpat content model
    - debian/patches/CVE-2026-4224.patch: recursion guard in conv_content_model()
    - CVE-2026-4224
  * SECURITY UPDATE: webbrowser argument injection via leading-dash URL
    - debian/patches/CVE-2026-4519.patch: reject URLs starting with '-'
    - CVE-2026-4519

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Mon, 20 Jul 2026 09:34:11 +0000

alt-python310 (3.10.20-2) stable; urgency=medium

  * ELS-2239: Build alt-python310 packages on Ubuntu 18.04/22.04 arm64

 -- Juan-Carlos Garcia <jgarcia@cloudlinux.com>  Wed, 15 Jul 2026 00:00:00 +0000

alt-python310 (3.10.20-1) stable; urgency=medium

  * ALTPYTH-592: Update to 3.10.20 version

 -- Razmik Manvelyan <rmanvelyan@cloudlinux.com>  Tue, 07 Apr 2026 00:00:00 +0000

alt-python310 (3.10.19-2) stable; urgency=medium

  * ALTPYTH-595: Build alt-python packages for Debian 12 and 13 on ARM

 -- Razmik Manvelyan <rmanvelyan@cloudlinux.com>  Fri, 27 Mar 2026 00:00:00 +0000

alt-python310 (3.10.19-1) stable; urgency=medium

  * ALTPTYH-584: Update to 3.10.19 version

 -- Huseyn Hajizada <hhajizada@cloudlinux.com>  Tue, 09 Dec 2025 18:41:00 +0000

alt-python310 (3.10.18-1) stable; urgency=medium

  * ALTPYTH-557: Update to 3.10.18 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Wed, 04 Jun 2025 00:23:18 +0000

alt-python310 (3.10.17-1) stable; urgency=medium

  * ALTPYTH-552: Update to 3.10.17 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Wed, 09 Apr 2025 00:23:51 +0000

alt-python310 (3.10.16-1) stable; urgency=medium

  * ALTPYTH-542: Update to 3.10.16 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Wed, 04 Dec 2024 00:23:48 +0000

alt-python310 (3.10.15-1) stable; urgency=medium

  * Update to 3.10.15 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Sat, 07 Sep 2024 06:23:35 +0000

alt-python310 (3.10.14-3) stable; urgency=medium

  * ALTPYTH-518: Resolve conflicts with idle3.appdata.xml with other alt-pythonXX-idle packages

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Thu, 25 Jul 2024 17:03:00 +0200   

alt-python310 (3.10.14-2) stable; urgency=medium

  * ALTPYTH-509: Always use alt-sqlite

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Wed, 10 Apr 2024 15:05:00 +0200 

alt-python310 (3.10.14-1) stable; urgency=medium

  * ALTPYTH-512: Update to 3.10.14 version

 -- CloudLinux Packaging Team <packager@cloudlinux.com>  Wed, 20 Mar 2024 00:23:09 +0000

alt-python310 (3.10.13-1) stable; urgency=medium

  * ALTPYTH-476: Build missing alt-python packages for CL ubuntu.
  * ALTPYTH-486: update to 3.10.12
  * ALTPYTH-481: Updated to 3.10.13

 -- Eduard Chiganov <echiganov@cloudlinux.com>  Mon, 21 Aug 2023 14:20:00 +0200

alt-python310 (3.10.9-1) stable; urgency=medium

  * update to 3.10.9

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Mon, 30 Jan 2023 17:00:00 +0200

alt-python310 (3.10.8-1) stable; urgency=medium

  * update to 3.10.8
  * ALTPYTH-443: CL9 compatibility

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Fri, 21 Oct 2022 17:08:00 +0200

alt-python310 (3.10.4-1) stable; urgency=medium

  * ALTPYTH-422: fix for ensurepip
  * update to 3.10.4

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Wed, 06 Apr 2022 10:08:00 +0200

alt-python310 (3.10.2-1) stable; urgency=medium

  * update to 3.10.2

 -- Sergey Fokin <sfokin@cloudlinux.com>  Fri, 28 Jan 2022 16:22:00 +0300

alt-python310 (3.10.1-1) stable; urgency=medium

  * initial build

 -- Sergey Fokin <sfokin@cloudlinux.com>  Tue, 14 Dec 2021 11:28:00 +0300
