alt-python310-pip (21.3.1-3) stable; urgency=medium

  * SECURITY UPDATE: Mercurial revision option injection in pip VCS URLs
    - debian/patches/CVE-2023-5752.patch: Mercurial revision option injection in pip VCS URLs
    - CVE-2023-5752
  * SECURITY UPDATE: symlink target not validated in tar extraction fallback
    - debian/patches/CVE-2025-8869.patch: symlink target not validated in tar extraction fallback
    - CVE-2025-8869
  * SECURITY UPDATE: path traversal via os.path.commonprefix in is_within_directory
    - debian/patches/CVE-2026-1703.patch: path traversal via os.path.commonprefix in is_within_directory
    - CVE-2026-1703
  * SECURITY UPDATE: tar/ZIP polyglot archive type confusion in unpack_file
    - debian/patches/CVE-2026-3219.patch: tar/ZIP polyglot archive type confusion in unpack_file
    - CVE-2026-3219
  * SECURITY UPDATE: pip self-version check runs after install allowing module shadowing
    - debian/patches/CVE-2026-6357.patch: pip self-version check runs after install allowing module shadowing
    - CVE-2026-6357

 -- Viktor Borzov <vborzov@cloudlinux.com>  Tue, 21 Jul 2026 14:08:48 -0400

alt-python310-pip (21.3.1-2) stable; urgency=medium

  * ALTPYTH-595: Build alt-python packages for Debian 12 and 13 on ARM

 -- Razmik Manvelyan <rmanvelyan@cloudlinux.com>  Fri, 27 Mar 2026 00:00:00 +0000

alt-python310-pip (21.3.1-1) stable; urgency=medium

  * initial build

 --  Sergey Fokin <sfokin@cloudlinux.com>  Tue, 14 Dec 2021 15:19:00 +3000
