diff --git a/Lib/ensurepip/__init__.py b/Lib/ensurepip/__init__.py index 94ddda442ade83..6aad7fdb923b0f 100644 --- a/Lib/ensurepip/__init__.py +++ b/Lib/ensurepip/__init__.py @@ -11,8 +11,8 @@ __all__ = ["version", "bootstrap"] _PACKAGE_NAMES = ('setuptools', 'pip') -_SETUPTOOLS_VERSION = "79.0.1" -_PIP_VERSION = "23.0.1" +_SETUPTOOLS_VERSION = "80.10.2" +_PIP_VERSION = "26.0.1" _PROJECTS = [ ("setuptools", _SETUPTOOLS_VERSION, "py3"), ("pip", _PIP_VERSION, "py3"), diff --git a/Lib/ensurepip/_bundled/pip-23.0.1-py3-none-any.whl b/Lib/ensurepip/_bundled/pip-23.0.1-py3-none-any.whl deleted file mode 100644 index a855dc40e8630d..00000000000000 Binary files a/Lib/ensurepip/_bundled/pip-23.0.1-py3-none-any.whl and /dev/null differ diff --git a/Lib/ensurepip/_bundled/pip-26.0.1-py3-none-any.whl b/Lib/ensurepip/_bundled/pip-26.0.1-py3-none-any.whl new file mode 100644 index 00000000000000..580d09a920422f Binary files /dev/null and b/Lib/ensurepip/_bundled/pip-26.0.1-py3-none-any.whl differ diff --git a/Lib/ensurepip/_bundled/setuptools-79.0.1-py3-none-any.whl b/Lib/ensurepip/_bundled/setuptools-79.0.1-py3-none-any.whl deleted file mode 100644 index 3eb896915897fb..00000000000000 Binary files a/Lib/ensurepip/_bundled/setuptools-79.0.1-py3-none-any.whl and /dev/null differ diff --git a/Lib/ensurepip/_bundled/setuptools-80.10.2-py3-none-any.whl b/Lib/ensurepip/_bundled/setuptools-80.10.2-py3-none-any.whl new file mode 100644 index 00000000000000..ec03b59065457d Binary files /dev/null and b/Lib/ensurepip/_bundled/setuptools-80.10.2-py3-none-any.whl differ diff --git a/Misc/NEWS.d/next/Library/2026-02-05-13-28-14.gh-issue-144538.d17905.rst b/Misc/NEWS.d/next/Library/2026-02-05-13-28-14.gh-issue-144538.d17905.rst new file mode 100644 index 00000000000000..84a140847a75fb --- /dev/null +++ b/Misc/NEWS.d/next/Library/2026-02-05-13-28-14.gh-issue-144538.d17905.rst @@ -0,0 +1,2 @@ +Upgrade bundled pip to 26.0.1 and setuptools to 80.10.2. This addresses +CVE-2023-5752, CVE-2025-8869, CVE-2024-23949, and CVE-2024-24049.