python-pip (9.0.1-2.3~ubuntu1.18.04.8) bionic-security; urgency=medium

  * SECURITY REGRESSION: fix regex in wheel.py
    - debian/patches/CVE-2022-40898.patch: Fix wheel regex to match
      upstream pip regex instead of upstream wheel regex. 

 -- David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>  Thu, 02 Mar 2023 15:03:51 +0100

python-pip (9.0.1-2.3~ubuntu1.18.04.7) bionic-security; urgency=medium

  * SECURITY UPDATE: ReDOS in wheel.py
    - debian/patches/CVE-2022-40898.patch: Fix potential DoS attack
      via wheel_file_re by restricting matching dash and dot characters
      in pip/wheel.py.
    - CVE-2022-40898

 -- David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>  Tue, 28 Feb 2023 10:48:00 +0100

python-pip (9.0.1-2.3~ubuntu1.18.04.6) bionic-security; urgency=medium

  * No-change rebuild due to wheel and setuptools update.

 -- David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>  Tue, 24 Jan 2023 10:34:07 +0100

python-pip (9.0.1-2.3~ubuntu1.18.04.5) bionic; urgency=medium

  * Fix handling of requests exceptions when dependencies are debundled.
    (LP: #1833229)

 -- Stefano Rivera <stefanor@ubuntu.com>  Fri, 30 Apr 2021 14:11:12 -0400

python-pip (9.0.1-2.3~ubuntu1.18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: directory traversal on pip install
    - debian/patches/CVE-2019-20916.patch: prevent pip install <url> from
      permitting directory traversal
    - CVE-2019-20916 

 -- Emilia Torino <emilia.torino@canonical.com>  Thu, 22 Oct 2020 11:40:50 -0300

python-pip (9.0.1-2.3~ubuntu1.18.04.3) bionic-security; urgency=medium

  * No change rebuild to pull in security fixes for urllib3

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 02 Oct 2020 06:59:10 -0400

python-pip (9.0.1-2.3~ubuntu1.18.04.2) bionic-security; urgency=medium

  * No change rebuild to pull in security fixes for urllib3 and requests 

 -- Mike Salvatore <mike.salvatore@canonical.com>  Thu, 13 Aug 2020 19:33:19 -0400

python-pip (9.0.1-2.3~ubuntu1.18.04.1) bionic; urgency=medium

  * d/p/bug1822842.patch: Pick fix to resolve issues when using
    --{extra-}-index-urls due to de-bundling of dependencies in
    distro versions of pip (LP: #1822842).

 -- James Page <james.page@ubuntu.com>  Wed, 03 Apr 2019 10:23:03 +0100

python-pip (9.0.1-2.3~ubuntu1) bionic-proposed; urgency=medium

  * SRU: LP: #1771624.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 16 May 2018 12:28:25 -0400

python-pip (9.0.1-2.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Build-depend on python3-idna. Closes: #897121, #896998.
  * debian/pip.dependencies: Add idna.
  * debian/rules: run dirtbike for idna.

 -- Matthias Klose <doko@debian.org>  Wed, 02 May 2018 12:35:24 +0200

# For older changelog entries, run 'apt-get changelog python-pip-whl'
