alt-python39-pip (21.3.1-3) stable; urgency=medium

  * SECURITY UPDATE: Mercurial revision option injection via VCS URL
    - debian/patches/CVE-2023-5752.patch: Mercurial revision option injection via VCS URL
    - CVE-2023-5752
  * SECURITY UPDATE: tar extraction misses symlink target check (no PEP 706 fallback)
    - debian/patches/CVE-2025-8869.patch: tar extraction misses symlink target check (no PEP 706 fallback)
    - CVE-2025-8869
  * SECURITY UPDATE: path traversal via os.path.commonprefix containment check
    - debian/patches/CVE-2026-1703.patch: path traversal via os.path.commonprefix containment check
    - CVE-2026-1703
  * SECURITY UPDATE: tar/ZIP polyglot archive interpretation conflict
    - debian/patches/CVE-2026-3219.patch: tar/ZIP polyglot archive interpretation conflict
    - CVE-2026-3219
  * SECURITY UPDATE: post-install self-version check could import malicious wheel content
    - debian/patches/CVE-2026-6357.patch: post-install self-version check could import malicious wheel content
    - CVE-2026-6357

 -- Viktor Borzov <vborzov@cloudlinux.com>  Tue, 21 Jul 2026 14:16:35 -0400

alt-python39-pip (21.3.1-2) stable; urgency=medium

  * ALTPYTH-501: Fix path to ssl cert

 --  Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Thu, 30 Nov 2023 17:55:00 +0100

alt-python39-pip (21.3.1-1.1) stable; urgency=medium

  * fix path for ssl sert

 --  Sergey Fokin <sfokin@cloudlinux.com>  Tue, 18 Jan 2022 11:55:00 +0300

alt-python39-pip (21.3.1-1) stable; urgency=medium

  * initial build

 --  Sergey Fokin <sfokin@cloudlinux.com>  Fri, 29 Oct 2021 16:16:00 +0300
