pip (20.2.4-4) stable; urgency=medium

  * SECURITY UPDATE: Fix revision hijacking via unicode separators in git references
    - debian/patches/CVE-2021-3572.patch: Fix revision hijacking via unicode separators in git references
    - CVE-2021-3572

 -- Juan-Carlos Garcia <jgarcia@cloudlinux.com>  Mon, 27 Jul 2026 07:30:00 -0400

pip (20.2.4-3) stable; urgency=medium

  * SECURITY UPDATE: Fix Mercurial argument injection via crafted revision string
    - debian/patches/CVE-2023-5752.patch: Fix Mercurial argument injection via crafted revision string
    - CVE-2023-5752
  * SECURITY UPDATE: Fix arbitrary file write via symlink in source distribution tarball
    - debian/patches/CVE-2025-8869.patch: Fix arbitrary file write via symlink in source distribution tarball
    - CVE-2025-8869
  * SECURITY UPDATE: Fix path traversal via sibling-directory prefix match in tarball extraction
    - debian/patches/CVE-2026-1703.patch: Fix path traversal via sibling-directory prefix match in tarball extraction
    - CVE-2026-1703
  * SECURITY UPDATE: Fix archive-format confusion when unpacking ambiguous archives
    - debian/patches/CVE-2026-3219.patch: Fix archive-format confusion when unpacking ambiguous archives
    - CVE-2026-3219
  * SECURITY UPDATE: Fix code execution via module import during post-install pip self-version check
    - debian/patches/CVE-2026-6357.patch: Fix code execution via module import during post-install pip self-version check
    - CVE-2026-6357
  * SECURITY UPDATE: Fix arbitrary file write via path traversal in wheel entry point script name
    - debian/patches/CVE-2026-8643.patch: Fix arbitrary file write via path traversal in wheel entry point script name
    - CVE-2026-8643

 -- Viktor Borzov <vborzov@cloudlinux.com>  Sat, 25 Jul 2026 06:54:21 -0400

pip (20.2.4-2) stable; urgency=medium

  * ALTPYTH-393: fix cert path

 --  Sergey Fokin <sfokin@cloudlinux.com>  Wed, 15 Oct 2021 11:20:00 +3000

pip (20.2.4-1) stable; urgency=medium

  * initial build

 --  Sergey Fokin <sfokin@cloudlinux.com>  Thu, 07 Oct 2021 19:12:25 +3000
