-
python2.5 (2.5.1-0ubuntu1.2) feisty-security; urgency=high
* SECURITY UPDATE: arbitrary code execution via multiple integer overflows.
* debian/rules, debian/patches/CVE-2008-1679.dpatch,
debian/patches/CVE-2008-1721.dpatch, debian/patches/stringobject.dpatch:
upstream fixes, thanks to Debian.
* debian/rules, debian/patches/CVE-2008-3143.dpatch,
debian/patches/CVE-2008-3142.dpatch, debian/patches/CVE-2008-2316.dpatch,
debian/patches/CVE-2008-2315.dpatch, debian/patches/CVE-2008-3144.dpatch:
upstream fixes, thanks to Robert Buchholz.
* References
CVE-2008-1679 CVE-2008-1721 CVE-2008-1887 CVE-2008-2315
CVE-2008-2316 CVE-2008-3142 CVE-2008-3143 CVE-2008-3144
-- Kees Cook <email address hidden> Tue, 29 Jul 2008 16:29:27 -0700
-
python2.5 (2.5.1-0ubuntu1.1) feisty-security; urgency=low
* SECURITY UPDATE: code execution via integer overflows
* debian/rules, debian/patches/CVE-2007-4965-int-overflow.dpatch: upstream
changes, thanks to Stephan Hermann.
* References
http://bugs.python.org/file8592/python-2.5.CVE-2007-4965-int-overflow.patch
CVE-2007-4965
-- Kees Cook <email address hidden> Thu, 06 Mar 2008 15:01:27 -0800
-
python2.5 (2.5.1-0ubuntu1) feisty-proposed; urgency=low
* Python-2.5.1 release; changes compared to the release candidate:
- SF #1701207: svnversion_init assertion failed; revert bogus asserts
(added to the wrong place) from rev 52501.
- Revert SF #1615701 (rev 53655): dict.update() does *not* call
__getitem__() or keys() if subclassed. This is to remain consistent
with 2.5.
- Revert 53667, bypass set specific optimizations for set and frozenset
subclasses. This is to remain consistent with 2.5.
- Describe undocumented third argument to touchline()
* Regenerate the documentation.
-- Matthias Klose <email address hidden> Wed, 18 Apr 2007 16:01:10 +0200
-
python2.5 (2.5.1~rc1-0ubuntu3) feisty; urgency=low
* Use apport_python_hook instead of apport.python_hook to speedup
the startup time of the interpreter. Ubuntu #105764.
-- Matthias Klose <email address hidden> Thu, 12 Apr 2007 12:27:43 +0200
-
python2.5 (2.5.1~rc1-0ubuntu2) feisty; urgency=low
* Reapply the change to Lib/plat-linux2/IN.py (lost in 2.5.1~rc1-0ubuntu1).
-- Matthias Klose <email address hidden> Fri, 6 Apr 2007 19:27:54 +0200
-
python2.5 (2.5.1~rc1-0ubuntu1) feisty; urgency=low
* Update to the 2.5.1 release candidate 1.
-- Matthias Klose <email address hidden> Fri, 6 Apr 2007 12:30:34 +0200
-
python2.5 (2.5-5ubuntu11) feisty; urgency=low
* Update to 20070327, taken from the 2.5 release branch.
- documentation fixes.
- Fix return type for PySequence_{Count,Index,Fast_GET_SIZE}.
- Fix #1675967: re patterns pickled with older Python versions can
now be unpickled. Ubuntu #74773.
- Fix bug #1684254: webbrowser now uses shlex to split any command lines
given to get().
- Fix a TypeError while unpacking an iterable is no longer masked
by a generic one with the message "unpack non-sequence".
- Fix an error/crash when encountering syntax errors in complex
if statements.
- Fix #931877, preventing a segfault in object_reduce_ex() by splitting
the implementation for __reduce__ and __reduce_ex__ into two separate
functions.
- The wave module now closes a file object it opened if initialization
failed.
- Don't modify __slots__ tuple if it contains an unicode name. Remove a
reference leak that happened if the name could not be converted
to string.
- Fix #767111, a long-standing bug in urllib which caused an
AttributeError instead of an IOError when the server's response didn't
contain a valid HTTP status line.
- Fix #1622896, a rare corner case where the bz2 module raised an
error in spite of a succesful compression.
- Support Unicode strings in
email.message.Message.{set_charset,get_content_charset}.
- Fix #1569798, a bug in distutils when building Python from a directory
within sys.exec_prefix. Remove the Ubuntu fix.
- Fix #742342; make Python stop segfaulting on infinitely-recursive
reload()s.
- Fix pdb's "ignore" and "condition" commands so they trap the IndexError
caused by passing in an invalid breakpoint number.
- remove unreachable code from type.__new__() method.
__dict__ and __weakref__ are removed from the slots tuple earlier
in the code, in the loop that mangles slot names.
- Fix #1531963; make SocketServer.TCPServer's server_address always be
equal to calling getsockname() on the server's socket.
- Fix #1651235; when a tuple was passed to a ctypes function call,
Python would crash instead of raising an error.
- Fix #1646630: ctypes.string_at(buf, 0) and ctypes.wstring_at(buf, 0)
returned string up to the first NUL character.
- Fix #1637850: make_table in difflib did not work with unicode.
- Fix #1676321: empty() returned wrong result.
* python-dbg: After trying to load a foo_d.so or foomodule_d.so extension,
try again using the unmodified name. The import will fail, if the extension
is not built with Py_DEBUG, but it better integrates with third party
archives (suggested by David Abrahams, Boost).
-- Matthias Klose <email address hidden> Thu, 29 Mar 2007 10:11:56 +0200
-
python2.5 (2.5-5ubuntu10) feisty; urgency=low
* Add debian/patches/subprocess-eintr-safety.dpatch:
- Create and use wrappers around read(), write(), and os.waitpid() in the
subprocess module which retry the operation on an EINTR (which happens
if e. g. an alarm was raised while the system call was in progress). It is
incredibly hard and inconvenient to sensibly handle this in
applications, so let's fix this at the right level.
- Patch based on original proposal of Peter Åstrand in
http://sourceforge.net/tracker/index.php?func=detail&aid=1068268&group_id=5470&atid=105470
- Add two test cases.
- (LP: #87292)
* debian/rules: Apply above patch.
-- Martin Pitt <email address hidden> Thu, 15 Mar 2007 09:20:37 +0100
-
python2.5 (2.5-5ubuntu9) feisty; urgency=medium
* Update to 20070307, taken from the 2.5 release branch.
* Remove debug output from maintainer scripts.
* Include the codecs and stringprep modules and all encodings except
the multibyte encodings and the bz2 codec into the -minimal package.
-- Matthias Klose <email address hidden> Wed, 7 Mar 2007 16:24:30 +0100
-
python2.5 (2.5-5ubuntu8) feisty; urgency=low
* Update to 20070305, taken from the 2.5 release branch:
- Prevent crash when trying to print an unraisable error
from a string exception.
- Properly discard third argument to slot_nb_inplace_power.
- Fix crash in exec if Unicode filename can't be decoded.
* Regenerate the documentation.
* Keep the module version in the .egg-info name, only remove the
python version.
* When trying to import the profile and pstats modules, don't
exit, add a hint to the exception pointing to the python-profiler
package, don't exit.
-- Matthias Klose <email address hidden> Mon, 5 Mar 2007 11:19:35 +0100
-
python2.5 (2.5-5ubuntu7) feisty; urgency=low
* Build depend on automake1.9.
-- Matthias Klose <email address hidden> Fri, 16 Feb 2007 18:49:01 +0100
-
python2.5 (2.5-5ubuntu6) feisty; urgency=low
* Update to 20070216, taken from the 2.5 release branch.
* Regenerate the documentation.
* Fix import of old style extensions in debug mode.
* python2.5-dbg: Install Misc/SpecialBuilds.txt, document the
debug changes in README.debug.
* Move pyconfig.h from the python2.5-dev into the python2.5 package.
* Do not install anymore outdated debhelper sample scripts.
* Set Ubuntu maintainer address.
-- Matthias Klose <email address hidden> Fri, 16 Feb 2007 16:10:49 +0100
-
python2.5 (2.5-5ubuntu5) feisty; urgency=low
* Update to 20070205, taken from the 2.5 release branch.
* Regenerate the documentation.
* Change the interpreter to build and install python extensions
built with the python-dbg interpreter with a different name into
the same path (by appending `_d' to the extension name).
* Do not encode the module version and python version into the
.egg-info name.
-- Matthias Klose <email address hidden> Mon, 5 Feb 2007 01:55:05 +0100
-
python2.5 (2.5-5ubuntu4) feisty; urgency=low
* python2.5-minimal: Remove the dependency on python-minimal,
not needed for Ubuntu. Ubuntu 79085.
-- Matthias Klose <email address hidden> Mon, 15 Jan 2007 16:43:54 +0000
-
python2.5 (2.5-5ubuntu3) feisty; urgency=low
* config/Makefile: Properly set the CXX macro.
* Move config/config.c into the python2.5 package; needed to
build pure python modules.
-- Matthias Klose <email address hidden> Mon, 15 Jan 2007 10:49:06 +0000
-
python2.5 (2.5-5ubuntu2) feisty; urgency=low
* Update to 20070111, taken from the 2.5 release branch.
* Regenerate the documentation.
-- Matthias Klose <email address hidden> Thu, 11 Jan 2007 15:18:44 +0000
-
python2.5 (2.5-5ubuntu1) feisty; urgency=low
* site.py: Add apport hook. Ubuntu #70957.
python2.5 (2.5-5) unstable; urgency=high
* Do not run the python benchmark on m68k. Timer problems.
Fixes FTBFS on m68k.
* Update to 20061209, taken from the 2.5 release branch.
- Fixes building the library reference in info format.
python2.5 (2.5-4) unstable; urgency=medium
* Update to 20061203, taken from the 2.5 release branch.
- Fixes build failures on knetfreebsd and the hurd. Closes: #397000.
* Clarify README about distutils. Closes: #396394.
* Move python2.5-config to python2.5-dev. Closes: #401451.
* Cleanup build-conflicts. Addresses: #394512.
python2.5 (2.5-3.1) unstable; urgency=low
* Non-maintainer upload.
* python2.5-minimal depends on python-minimal (>= 2.4.4-1) because it's the
first version which lists python2.5 as an unsupported runtime (ie a
runtime that is available but for which modules are not auto-compiled).
And being listed there is required for python-central to accept the
installation of python2.5-minimal. Closes: #397006
python2.5 (2.5-3) unstable; urgency=medium
* Update to 20061029 (2.4.4 was released on 20061019), taken from
the 2.5 release branch. We do not want to have regressions in
2.5 compared to the 2.4.4 release.
* Don't run pybench on m68k, fails in the calibration loop. Closes: #391030.
* Run the installation/removal hooks. Closes: #383292, #391036.
-- Matthias Klose <email address hidden> Wed, 13 Dec 2006 14:05:02 +0100
-
python2.5 (2.5-2ubuntu3) feisty; urgency=low
* Rebuild for ldbl128 change on powerpc and sparc.
-- Matthias Klose <email address hidden> Thu, 2 Nov 2006 10:01:14 +0000
-
python2.5 (2.5-2ubuntu2) edgy; urgency=low
* PVER-minimal.postinst: Use this version as the first version
having support for the current Python policy.
-- Matthias Klose <email address hidden> Fri, 6 Oct 2006 15:12:26 +0200
