python2.5 2.5.2-2ubuntu6.2 source package in Ubuntu


python2.5 (2.5.2-2ubuntu6.2) hardy-security; urgency=low

  * SECURITY UPDATE: optionally disallow setting sys.path when setting
    - debian/patches/CVE-2008-5983.dpatch: add new C API function,
    - CVE-2008-5983
  * SECURITY UPDATE: fix integer overflows in audioop module
    - debian/patches/CVE-2010-1634.dpatch: Fix incorrect and UB-inducing
      overflow checks
    - CVE-2010-1634
  * SECURITY UPDATE: fix DoS in audioop module
    - debian/patches/CVE-2010-2089.dpatch: ensure that the input string length
      is a multiple of the frame size
    - CVE-2010-2089
  * SECURITY UPDATE: Fix CGIHTTPServer information disclosure.
    - debian/patches/CVE-2011-1015.dpatch: Relative paths are now collapsed
      within the url properly before looking in cgi_directories.
    - CVE-2011-1015
  * SECURITY UPDATE: update urllib and urllib2 for invalid redirections
    - debian/patches/CVE-2011-1521.dpatch: only process Location headers for
      http, https, and ftp
    - CVE-2011-1521
  * SECURITY UPDATE: fix XSS in SimpleHTTPServer
    - debian/patches/CVE-2011-4940.dpatch: add a charset parameter to the
    - CVE-2011-4940
    - debian/patches/CVE-2011-4944.dpatch: create ~/.pypirc securely
    - CVE-2011-4944
  * SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
    malformed POST request
    - debian/patches/CVE-2012-0845.dpatch: break if don't receive EOF in
    - CVE-2012-0845
  * SECURITY UPDATE: Denial of service via hash collisions
    - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Add random salt value
      to hash inputs in lib/xmlparse.c
    - CVE-2012-0876
  * SECURITY UPDATE: Denial of service via memory leak
    - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Properly reallocate
      memory in lib/xmlparse.c
    - CVE-2012-1148
    - debian/patches/CVE-2010-3493.dpatch: adds proper error handling on
      accept() when smtpd accepts new incoming connections
    - CVE-2010-3493
 -- Jamie Strandboge <email address hidden>   Fri, 12 Oct 2012 09:03:09 -0500

Upload details

Uploaded by:
Jamie Strandboge on 2012-10-12
Uploaded to:
Original maintainer:
Ubuntu Developers
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Hardy updates on 2012-10-17 main python
Hardy security on 2012-10-17 main python


File Size MD5 Checksum
python2.5_2.5.2.orig.tar.gz 11.0 MiB 87619e5bf07b3506fec639b7e4d86215
python2.5_2.5.2-2ubuntu6.2.diff.gz 2.8 MiB 0e2b785039750b5fa015fb605f9f0141
python2.5_2.5.2-2ubuntu6.2.dsc 2.2 KiB f0089141bd26d993d3a656cfb324b688

View changes file

Binary packages built by this source

idle-python2.5: An IDE for Python (v2.5) using Tkinter

 IDLE is an Integrated Development Environment for Python (v2.5).
 IDLE is written using Tkinter and therefore quite platform-independent.

python2.5: An interactive high-level object-oriented language (version 2.5)

 Version 2.5 of the high-level, interactive object oriented language,
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.

python2.5-dbg: Debug Build of the Python Interpreter (version 2.5)

 Python interpreter configured with --pydebug. Dynamically loaded modules are
 searched in /usr/lib/python2.5/lib-dynload/debug first.

python2.5-dev: Header files and a static library for Python (v2.5)

 Header files, a static library and development tools for building
 Python (v2.5) modules, extending the Python interpreter or embedding
 Python (v2.5) in applications.
 Maintainers of Python packages should read README.maintainers.

python2.5-doc: Documentation for the high-level object-oriented language Python (v2.5)

 These is the official set of documentation for the interactive high-level
 object-oriented language Python (v2.5). All documents are provided
 in HTML format, some in info format. The package consists of ten documents:
   * What's New in Python2.5
   * Tutorial
   * Python Library Reference
   * Macintosh Module Reference
   * Python Language Reference
   * Extending and Embedding Python
   * Python/C API Reference
   * Installing Python Modules
   * Documenting Python
   * Distributing Python Modules

python2.5-examples: Examples for the Python language (v2.5)

 Examples, Demos and Tools for Python (v2.5). These are files included in
 the upstream Python distribution (v2.5).

python2.5-minimal: A minimal subset of the Python language (version 2.5)

 This package contains the interpreter and some essential modules. It can
 be used in the boot process for some basic tasks.
 See /usr/share/doc/python2.5-minimal/README.Debian for a list of the modules
 contained in this package.