python3.7 3.7.3-2ubuntu0.1 source package in Ubuntu

Changelog

python3.7 (3.7.3-2ubuntu0.1) disco-security; urgency=medium

  * SECURITY UPDATE: HTTP header injection
    - debian/patches/CVE-2019-9740.patch: disallow control chars in http
      URLs in Lib/http/client.py, Lib/test/test_urllib.py,
      Lib/test/test_xmlrpc.py.
    - CVE-2019-9740
    - CVE-2019-9947
  * SECURITY UPDATE: urllib support the local_file: scheme
    - debian/patches/CVE-2019-9948.patch: disallow file reading in
      Lib/urllib/request.py, Lib/test/test_urllib.py.
    - CVE-2019-9948
  * SECURITY UPDATE: incomplete fix for CVE-2019-9636
    - debian/patches/CVE-2019-10160-1.patch: fix handling of
      pre-normalization characters in urlsplit() in
      Lib/test/test_urlparse.py, Lib/urllib/parse.py.
    - debian/patches/CVE-2019-10160-2.patch: correct fix to handle
      decomposition in usernames in Lib/test/test_urlparse.py,
      Lib/urllib/parse.py.
    - CVE-2019-10160

 -- Marc Deslauriers <email address hidden>  Tue, 20 Aug 2019 13:04:43 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2019-08-21
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Disco updates on 2019-09-09 main misc
Disco security on 2019-09-09 main misc

Downloads

File Size SHA-256 Checksum
python3.7_3.7.3.orig.tar.xz 16.3 MiB da60b54064d4cfcd9c26576f6df2690e62085123826cff2e667e72a91952d318
python3.7_3.7.3-2ubuntu0.1.debian.tar.xz 209.6 KiB a259da650989e391a0047b47ae7536739f4bd3e811f62f0ff6206db55dfb1645
python3.7_3.7.3-2ubuntu0.1.dsc 3.4 KiB 4c0457d19b32a4e68c2f91277db9c592aeaee1b5329a7703e68e868717bfcbd6

View changes file

Binary packages built by this source

idle-python3.7: IDE for Python (v3.7) using Tkinter

 IDLE is an Integrated Development Environment for Python (v3.7).
 IDLE is written using Tkinter and therefore quite platform-independent.

libpython3.7: Shared Python runtime library (version 3.7)

 Python is a high-level, interactive, object-oriented language. Its 3.7 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.
 .
 This package contains the shared runtime library, normally not needed
 for programs using the statically linked interpreter.

libpython3.7-dbg: Debug Build of the Python Interpreter (version 3.7)

 The package holds two things:
 .
 - Extensions for a Python interpreter configured with --pydebug.
 - Debug information for standard python extensions.
 .
 See the README.debug for more information.

libpython3.7-dev: Header files and a static library for Python (v3.7)

 Header files, a static library and development tools for building
 Python (v3.7) modules, extending the Python interpreter or embedding
 Python (v3.7) in applications.
 .
 Maintainers of Python packages should read README.maintainers.
 .
 This package contains development files. It is normally not
 used on it's own, but as a dependency of python3.7-dev.

libpython3.7-minimal: Minimal subset of the Python language (version 3.7)

 This package contains some essential modules. It is normally not
 used on it's own, but as a dependency of python3.7-minimal.

libpython3.7-stdlib: Interactive high-level object-oriented language (standard library, version 3.7)

 Python is a high-level, interactive, object-oriented language. Its 3.7 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.
 .
 This package contains Python 3.7's standard library. It is normally not
 used on its own, but as a dependency of python3.7.

libpython3.7-testsuite: Testsuite for the Python standard library (v3.7)

 The complete testsuite for the Python standard library. Note that
 a subset is found in the libpython3.7-stdlib package, which should
 be enough for other packages to use (please do not build-depend
 on this package, but file a bug report to include additional
 testsuite files in the libpython3.7-stdlib package).

python3.7: Interactive high-level object-oriented language (version 3.7)

 Python is a high-level, interactive, object-oriented language. Its 3.7 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.

python3.7-dbg: Debug Build of the Python Interpreter (version 3.7)

 The package holds two things:
 .
 - A Python interpreter configured with --pydebug. Dynamically loaded modules
   are searched as <foo>_d.so first. Third party extensions need a separate
   build to be used by this interpreter.
 - Debug information for standard python interpreter and extensions.
 .
 See the README.debug for more information.

python3.7-dev: Header files and a static library for Python (v3.7)

 Header files, a static library and development tools for building
 Python (v3.7) modules, extending the Python interpreter or embedding
 Python (v3.7) in applications.
 .
 Maintainers of Python packages should read README.maintainers.

python3.7-doc: Documentation for the high-level object-oriented language Python (v3.7)

 These is the official set of documentation for the interactive high-level
 object-oriented language Python (v3.7). All documents are provided
 in HTML format. The package consists of ten documents:
 .
   * What's New in Python3.7
   * Tutorial
   * Python Library Reference
   * Macintosh Module Reference
   * Python Language Reference
   * Extending and Embedding Python
   * Python/C API Reference
   * Installing Python Modules
   * Documenting Python
   * Distributing Python Modules

python3.7-examples: Examples for the Python language (v3.7)

 Examples, Demos and Tools for Python (v3.7). These are files included in
 the upstream Python distribution (v3.7).

python3.7-minimal: Minimal subset of the Python language (version 3.7)

 This package contains the interpreter and some essential modules. It can
 be used in the boot process for some basic tasks.
 See /usr/share/doc/python3.7-minimal/README.Debian for a list of the modules
 contained in this package.

python3.7-venv: Interactive high-level object-oriented language (pyvenv binary, version 3.7)

 Python is a high-level, interactive, object-oriented language. Its 3.7 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.
 .
 This package contains the pyvenv-3.7 binary.