-
python-pip (9.0.1-2.3~ubuntu1.18.04.8) bionic-security; urgency=medium
* SECURITY REGRESSION: fix regex in wheel.py
- debian/patches/CVE-2022-40898.patch: Fix wheel regex to match
upstream pip regex instead of upstream wheel regex.
-- David Fernandez Gonzalez <email address hidden> Thu, 02 Mar 2023 15:03:51 +0100
-
python-pip (9.0.1-2.3~ubuntu1.18.04.7) bionic-security; urgency=medium
* SECURITY UPDATE: ReDOS in wheel.py
- debian/patches/CVE-2022-40898.patch: Fix potential DoS attack
via wheel_file_re by restricting matching dash and dot characters
in pip/wheel.py.
- CVE-2022-40898
-- David Fernandez Gonzalez <email address hidden> Tue, 28 Feb 2023 10:48:00 +0100
-
python-pip (9.0.1-2.3~ubuntu1.18.04.6) bionic-security; urgency=medium
* No-change rebuild due to wheel and setuptools update.
-- David Fernandez Gonzalez <email address hidden> Tue, 24 Jan 2023 10:34:07 +0100
-
python-pip (9.0.1-2.3~ubuntu1.18.04.5) bionic; urgency=medium
* Fix handling of requests exceptions when dependencies are debundled.
(LP: #1833229)
-- Stefano Rivera <email address hidden> Fri, 30 Apr 2021 14:11:12 -0400
-
python-pip (9.0.1-2.3~ubuntu1.18.04.4) bionic-security; urgency=medium
* SECURITY UPDATE: directory traversal on pip install
- debian/patches/CVE-2019-20916.patch: prevent pip install <url> from
permitting directory traversal
- CVE-2019-20916
-- Emilia Torino <email address hidden> Thu, 22 Oct 2020 11:40:50 -0300
-
python-pip (9.0.1-2.3~ubuntu1.18.04.3) bionic-security; urgency=medium
* No change rebuild to pull in security fixes for urllib3
-- Marc Deslauriers <email address hidden> Fri, 02 Oct 2020 06:59:10 -0400
-
python-pip (9.0.1-2.3~ubuntu1.18.04.2) bionic-security; urgency=medium
* No change rebuild to pull in security fixes for urllib3 and requests
-- Mike Salvatore <email address hidden> Thu, 13 Aug 2020 19:33:19 -0400
-
python-pip (9.0.1-2.3~ubuntu1.18.04.1) bionic; urgency=medium
* d/p/bug1822842.patch: Pick fix to resolve issues when using
--{extra-}-index-urls due to de-bundling of dependencies in
distro versions of pip (LP: #1822842).
-- James Page <email address hidden> Wed, 03 Apr 2019 10:23:03 +0100
-
python-pip (9.0.1-2.3~ubuntu1) bionic-proposed; urgency=medium
* SRU: LP: #1771624.
python-pip (9.0.1-2.3) unstable; urgency=medium
* Non-maintainer upload.
* Build-depend on python3-idna. Closes: #897121, #896998.
* debian/pip.dependencies: Add idna.
* debian/rules: run dirtbike for idna.
python-pip (9.0.1-2.2) unstable; urgency=medium
* Non-maintainer upload.
* debian/pip.dependencies: Add certifi.
* debian/rules: run dirtbike for certifi.
* pip/_vendor/__init__.py: Use the unvendored urllib3. Closes: #896998.
python-pip (9.0.1-2.1) unstable; urgency=medium
* Non-maintainer upload.
* python3-pip: Depend on python3-distutils. Closes: #896390.
-- Matthias Klose <email address hidden> Wed, 16 May 2018 12:28:25 -0400
-
python-pip (9.0.1-2.1) unstable; urgency=medium
* Non-maintainer upload.
* python3-pip: Depend on python3-distutils. Closes: #896390.
-- Matthias Klose <email address hidden> Thu, 26 Apr 2018 08:19:13 +0200
-
python-pip (9.0.1-2) unstable; urgency=medium
* d/control: Update python-setuptools Built-Using version.
-- Barry Warsaw <email address hidden> Wed, 11 Jan 2017 15:48:53 -0500
