alt-python312-setuptools (69.0.2-3) stable; urgency=medium

  * SECURITY UPDATE: command injection in PackageIndex VCS downloads
    - debian/patches/CVE-2024-6345.patch: pass argv lists to
      subprocess.check_call() instead of interpolating the URL and revision
      into an os.system() shell string (CWE-78).
    - CVE-2024-6345
  * SECURITY UPDATE: path traversal in the download filename
    - debian/patches/CVE-2025-47273.patch: sanitise the name derived from the
      URL so a percent-encoded absolute path cannot escape tmpdir (CWE-22).
    - CVE-2025-47273

 -- Tamar Zerekidze <tzerekidze@cloudlinux.com>  Thu, 27 Aug 2026 12:00:00 +0000

alt-python312-setuptools (69.0.2-2) stable; urgency=medium

  * ALTPYTH-595: Build alt-python packages for Debian 12 and 13 on ARM

 -- Razmik Manvelyan <rmanvelyan@cloudlinux.com>  Fri, 27 Mar 2026 00:00:00 +0000

alt-python312-setuptools (69.0.2-1) stable; urgency=medium

  * Initial build


 -- Ilya Voyskovsky <ivoyskovsky@cloudlinux.com>  Thu, 7 Dec 2023 13:20:00 +0300
