alt-python37-setuptools (58.3.0-4) stable; urgency=medium

  * SECURITY UPDATE: MANIFEST.in exclusion bypass via Unicode normalization
    - debian/patches/CVE-2026-59890.patch: normalize pattern and path to NFC
      before matching in FileList (translate_pattern)
    - CVE-2026-59890

 -- Viktor Borzov <vborzov@cloudlinux.com>  Tue, 21 Jul 2026 12:00:00 +0100

alt-python37-setuptools (58.3.0-3) stable; urgency=medium

  * SECURITY UPDATE: regex denial of service via crafted HTML
    - debian/patches/CVE-2022-40897.patch: limit whitespace matching in REL regex
    - CVE-2022-40897
  * SECURITY UPDATE: remote code execution via command injection in VCS downloads
    - debian/patches/CVE-2024-6345.patch: replace os.system with subprocess.check_call
    - CVE-2024-6345
  * SECURITY UPDATE: path traversal in download filename resolution
    - debian/patches/CVE-2025-47273.patch: validate download filename stays within tmpdir
    - CVE-2025-47273

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Wed, 08 Apr 2026 12:00:00 +0100

alt-python37-setuptools (58.3.0-2) stable; urgency=medium

  * ALTPYTH-407: call lve-stats scripts

 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Fri, 06 May 2022 18:00:00 +0200

alt-python37-setuptools (58.3.0-1) stable; urgency=medium

  * update to 58.3.0

 -- Sergey Fokin <sfokin@cloudlinux.com>  Mon, 22 Nov 2021 13:04:00 +0300

alt-python37-setuptools (38.5.2-1) stable; urgency=medium

  * Initial build

 -- Sergey Fokin <sfokin@cloudlinux.com>  Tue, 05 Oct 2021 17:04:35 +0300
