alt-python39-setuptools (58.3.0-2) stable; urgency=medium

  * SECURITY UPDATE: regex denial of service via crafted HTML
    - debian/patches/CVE-2022-40897.patch: limit whitespace matching in REL regex
    - CVE-2022-40897
  * SECURITY UPDATE: remote code execution via command injection in VCS downloads
    - debian/patches/CVE-2024-6345.patch: replace os.system with subprocess.check_call
    - CVE-2024-6345
  * SECURITY UPDATE: path traversal in download filename resolution
    - debian/patches/CVE-2025-47273.patch: validate download filename stays within tmpdir
    - CVE-2025-47273

 -- Juan Carlos Garcia <jgarcia@cloudlinux.com>  Fri, 27 Mar 2026 12:38:10 +0100

alt-python39-setuptools (58.3.0-1) stable; urgency=medium

  * Initial build

 -- Sergey Fokin <sfokin@cloudlinux.com>  Fri, 29 Oct 2021 12:07:00 +0300
