python2.5 2.5.2-2ubuntu6.2 source package in Ubuntu

Changelog

python2.5 (2.5.2-2ubuntu6.2) hardy-security; urgency=low

  * SECURITY UPDATE: optionally disallow setting sys.path when setting
    sys.argv
    - debian/patches/CVE-2008-5983.dpatch: add new C API function,
      PySys_SetArgvEx
    - CVE-2008-5983
  * SECURITY UPDATE: fix integer overflows in audioop module
    - debian/patches/CVE-2010-1634.dpatch: Fix incorrect and UB-inducing
      overflow checks
    - CVE-2010-1634
  * SECURITY UPDATE: fix DoS in audioop module
    - debian/patches/CVE-2010-2089.dpatch: ensure that the input string length
      is a multiple of the frame size
    - CVE-2010-2089
  * SECURITY UPDATE: Fix CGIHTTPServer information disclosure.
    - debian/patches/CVE-2011-1015.dpatch: Relative paths are now collapsed
      within the url properly before looking in cgi_directories.
    - CVE-2011-1015
  * SECURITY UPDATE: update urllib and urllib2 for invalid redirections
    - debian/patches/CVE-2011-1521.dpatch: only process Location headers for
      http, https, and ftp
    - http://bugs.python.org/issue11662
    - CVE-2011-1521
  * SECURITY UPDATE: fix XSS in SimpleHTTPServer
    - debian/patches/CVE-2011-4940.dpatch: add a charset parameter to the
      Content-type
    - CVE-2011-4940
  * SECURE UPDATE: http://bugs.python.org/issue13512
    - debian/patches/CVE-2011-4944.dpatch: create ~/.pypirc securely
    - CVE-2011-4944
  * SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
    malformed POST request
    - debian/patches/CVE-2012-0845.dpatch: break if don't receive EOF in
      Lib/SimpleXMLRPCServer.py
    - CVE-2012-0845
  * SECURITY UPDATE: Denial of service via hash collisions
    - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Add random salt value
      to hash inputs in lib/xmlparse.c
    - CVE-2012-0876
  * SECURITY UPDATE: Denial of service via memory leak
    - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Properly reallocate
      memory in lib/xmlparse.c
    - CVE-2012-1148
  * SECURITY UPDATE: fix DoS in smtpd.py
    - debian/patches/CVE-2010-3493.dpatch: adds proper error handling on
      accept() when smtpd accepts new incoming connections
    - http://bugs.python.org/issue9129
    - CVE-2010-3493
 -- Jamie Strandboge <email address hidden>   Fri, 12 Oct 2012 09:03:09 -0500

Upload details

Uploaded by:
Jamie Strandboge on 2012-10-12
Uploaded to:
Hardy
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any
Section:
python
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
python2.5_2.5.2.orig.tar.gz 11.0 MiB 87619e5bf07b3506fec639b7e4d86215
python2.5_2.5.2-2ubuntu6.2.diff.gz 2.8 MiB 0e2b785039750b5fa015fb605f9f0141
python2.5_2.5.2-2ubuntu6.2.dsc 2.2 KiB f0089141bd26d993d3a656cfb324b688

View changes file

Binary packages built by this source

idle-python2.5: No summary available for idle-python2.5 in ubuntu hardy.

No description available for idle-python2.5 in ubuntu hardy.

python2.5: No summary available for python2.5 in ubuntu hardy.

No description available for python2.5 in ubuntu hardy.

python2.5-dbg: No summary available for python2.5-dbg in ubuntu hardy.

No description available for python2.5-dbg in ubuntu hardy.

python2.5-dev: No summary available for python2.5-dev in ubuntu hardy.

No description available for python2.5-dev in ubuntu hardy.

python2.5-doc: No summary available for python2.5-doc in ubuntu hardy.

No description available for python2.5-doc in ubuntu hardy.

python2.5-examples: No summary available for python2.5-examples in ubuntu hardy.

No description available for python2.5-examples in ubuntu hardy.

python2.5-minimal: No summary available for python2.5-minimal in ubuntu hardy.

No description available for python2.5-minimal in ubuntu hardy.