python-pip (20.0.2-5ubuntu1.11) focal-security; urgency=medium

  * No-change rebuild for urllib3 update. 

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 29 Oct 2024 15:02:27 +0100

python-pip (20.0.2-5ubuntu1.10) focal-security; urgency=medium

  * No-change rebuild for urllib3 update. 

 -- Jorge Sancho Larraz <jorge.sancho.larraz@canonical.com>  Thu, 09 Nov 2023 09:23:25 +0100

python-pip (20.0.2-5ubuntu1.9) focal-security; urgency=medium

  * No-change rebuild for requests update.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 05 Jun 2023 14:20:19 -0400

python-pip (20.0.2-5ubuntu1.8) focal-security; urgency=medium

  * SECURITY UPDATE: ReDOS in wheel.py
    - debian/patches/CVE-2022-40898.patch: Fix potential DoS attack
      via wheel_file_re by restricting matching dash and dot characters
      in src/pip/_internal/models/wheel.py.
    - CVE-2022-40898

 -- David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>  Tue, 28 Feb 2023 10:41:12 +0100

python-pip (20.0.2-5ubuntu1.7) focal-security; urgency=medium

  * No-change rebuild due to wheel and setuptools update.

 -- David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>  Tue, 24 Jan 2023 10:31:49 +0100

python-pip (20.0.2-5ubuntu1.6) focal; urgency=medium

  * Update debundle.patch so pypy uses base_prefix as well, fixing pypy
    virtualenvs. (LP: #1935882)

 -- Stefano Rivera <stefanor@ubuntu.com>  Mon, 12 Jul 2021 23:11:28 -0400

python-pip (20.0.2-5ubuntu1.5) focal; urgency=medium

  * Security: Don't split git references on unicode separators. (LP: #1926957)

 -- Stefano Rivera <stefanor@ubuntu.com>  Wed, 12 May 2021 21:04:29 -0400

python-pip (20.0.2-5ubuntu1.4) focal; urgency=medium

  * Look for pip config /etc (LP: #1914239)
  * Provide the pip binary again (LP: #1927865)

 -- Stefano Rivera <stefanor@ubuntu.com>  Sun, 09 May 2021 12:50:53 -0400

python-pip (20.0.2-5ubuntu1.3) focal; urgency=medium

  * Add Breaks: python3-virtualenv (<< 20.0.17-1ubuntu0.3) to python-pip-whl,
    which bumps the seed-app-data version. Our LP: #1880749 change broke
    existing seed-app-data caches.

 -- Stefano Rivera <stefanor@ubuntu.com>  Fri, 26 Feb 2021 18:38:56 -0800

python-pip (20.0.2-5ubuntu1.2) focal; urgency=medium

  * Switch from vendoring pytoml to toml, following pep517's dependency.
    (LP: #1880749)
  * Use sys.base_prefix instead of sys.prefix in debundle.patch. Back-ported
    from 20.1-1 to allow virtualenvs to avoid needing to install pip's
    dependencies in new venvs. (LP: #1904945)

 -- Stefano Rivera <stefanor@ubuntu.com>  Mon, 25 Jan 2021 22:36:55 -0700

# For older changelog entries, run 'apt-get changelog python-pip-whl'
