setuptools/command/easy_install.py | 58 54 + 4 - 0 !
setuptools/command/install_egg_info.py | 19 18 + 1 - 0 !
2 files changed, 72 insertions(+), 5 deletions(-)

---

setuptools/command/easy_install.py | 4 4 + 0 - 0 !
setuptools/command/install_lib.py | 26 26 + 0 - 0 !
2 files changed, 30 insertions(+)

---

docs/conf.py | 3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-)

---

docs/history.rst | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

setuptools/command/install_egg_info.py | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

---

setuptools/command/easy_install.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

setuptools/command/egg_info.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

setuptools/dist.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

docs/Makefile | 75 75 + 0 - 0 !
1 file changed, 75 insertions(+)

---

docs/conf.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

docs/conf.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

docs/conf.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

docs/conf.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

docs/conf.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---

docs/conf.py | 13 0 + 13 - 0 !
1 file changed, 13 deletions(-)

---

setuptools/package_index.py | 145 80 + 65 - 0 !
setuptools/tests/test_packageindex.py | 34 20 + 14 - 0 !
2 files changed, 100 insertions(+), 79 deletions(-)

 [patch 01/10] .. [patch 10/10] modernize package_index vcs handling

The issue is a possible remote code execution by supplying malicious URLs in a
package index or via the command line. The issue boils down to unsafe use of
os.system. Because easy_install and package_index are deprecated, the attack
surface is smaller, but it's conceivable through social engineering or minor
compromise to a package index could grant remote access. The fix was released
in v70.0.0.

setuptools/package_index.py | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

---