-
python2.5 (2.5.1-5ubuntu5.2) gutsy-security; urgency=high
* SECURITY UPDATE: arbitrary code execution via multiple integer overflows.
* debian/rules, debian/patches/CVE-2008-1679.dpatch,
debian/patches/CVE-2008-1721.dpatch, debian/patches/stringobject.dpatch:
upstream fixes, thanks to Debian.
* debian/rules, debian/patches/CVE-2008-3143.dpatch,
debian/patches/CVE-2008-3142.dpatch, debian/patches/CVE-2008-2316.dpatch,
debian/patches/CVE-2008-2315.dpatch, debian/patches/CVE-2008-3144.dpatch:
upstream fixes, thanks to Robert Buchholz.
* References
CVE-2008-1679 CVE-2008-1721 CVE-2008-1887 CVE-2008-2315
CVE-2008-2316 CVE-2008-3142 CVE-2008-3143 CVE-2008-3144
-- Kees Cook <email address hidden> Tue, 29 Jul 2008 16:29:27 -0700
-
python2.5 (2.5.1-5ubuntu5.1) gutsy-security; urgency=low
* SECURITY UPDATE: code execution via integer overflows.
* debian/rules, debian/patches/CVE-2007-4965-int-overflow.dpatch: upstream
changes, thanks to Stephan Hermann.
* References
http://bugs.python.org/file8592/python-2.5.CVE-2007-4965-int-overflow.patch
CVE-2007-4965
-- Kees Cook <email address hidden> Thu, 06 Mar 2008 14:39:57 -0800
-
python2.5 (2.5.1-5ubuntu5) gutsy; urgency=low
* Move developer related docs to the -dev package.
-- Matthias Klose <email address hidden> Fri, 05 Oct 2007 12:58:33 +0200
-
python2.5 (2.5.1-5ubuntu4) gutsy; urgency=low
* Fix segfault in _ctypes module when configured with --with-system-ffi.
LP: #72505.
* Configure --with-system-ffi.
* Enable running the testsuite.
* Update to 20070929, taken from the 2.5 release branch.
* Regenerate the documentation.
-- Matthias Klose <email address hidden> Sat, 29 Sep 2007 12:23:27 +0200
-
python2.5 (2.5.1-5ubuntu3) gutsy; urgency=low
* Do not apply the db4.6 configuration patch.
-- Matthias Klose <email address hidden> Wed, 12 Sep 2007 00:51:03 +0200
-
python2.5 (2.5.1-5ubuntu2) gutsy; urgency=medium
* Revert back to use db4.5 for the bsddb3 extension. The DB_HASH access
method databases can lockup the process.
* Update to 20070813, taken from the 2.5 release branch.
-- Matthias Klose <email address hidden> Tue, 11 Sep 2007 20:21:29 +0000
-
python2.5 (2.5.1-5ubuntu1) gutsy; urgency=low
* Fix handling of packages in linecache.py (Kevin Goodsell). LP: #70902.
* Bump debhelper to v5.
-- Matthias Klose <email address hidden> Fri, 17 Aug 2007 11:49:16 +0200
-
python2.5 (2.5.1-4ubuntu2) gutsy; urgency=low
* Search for db4.6 header files. LP: #132580.
-- Matthias Klose <email address hidden> Wed, 15 Aug 2007 11:09:57 +0200
-
python2.5 (2.5.1-4ubuntu1) gutsy; urgency=low
* Merge with Debian; remaining changes:
- Include the pregenerated documentation.
- Set priority of python2.5-minimal to required.
* Regenerate the documentation.
python2.5 (2.5.1-4) unstable; urgency=low
* Update to 20070813, taken from the 2.5 release branch.
* Include plat-mac/plistlib.py (plat-mac is not in sys.path by default.
Closes: #435826.
* Use emacs22 to build the documentation in info format. Closes: #434969.
* Build-depend on db-dev (>= 4.6). Closes: #434965.
python2.5 (2.5.1-3) unstable; urgency=high
* Support mixed-endian IEEE floating point, as found in the ARM old-ABI
(Aurelien Jarno). Closes: #434905.
python2.5 (2.5.1-2) unstable; urgency=low
* Update to 20070717, taken from the 2.5 release branch.
* Fix reference count for sys.pydebug variable. Addresses: #431393.
* Build depend on libbluetooth-dev instead of libbluetooth2-dev.
-- Matthias Klose <email address hidden> Tue, 14 Aug 2007 13:44:55 +0200
-
python2.5 (2.5.1-1ubuntu4) gutsy; urgency=low
* Fix reference count for sys.pydebug variable. Closes LP: #124549.
* Build depend on libbluetooth-dev instead of libbluetooth2-dev.
* Include the docs in info format again. Closes LP: #116788.
-- Matthias Klose <email address hidden> Tue, 17 Jul 2007 13:52:03 +0200
-
python2.5 (2.5.1-1ubuntu3) gutsy; urgency=low
* Update to 20070527, taken from the 2.5 release branch.
* Regenerate the documentation.
* Build-depend on texlive instead of tetex-*.
-- Matthias Klose <email address hidden> Sun, 27 May 2007 13:55:51 +0000
-
python2.5 (2.5.1-1ubuntu2) gutsy; urgency=low
* Fix build dependency on gcc-4.1.
-- Matthias Klose <email address hidden> Thu, 26 Apr 2007 14:24:13 +0200
-
python2.5 (2.5.1-1ubuntu1) gutsy; urgency=low
* Merge with Debian; remaining changes:
- Include the pregenerated documentation.
- Set priority of python2.5-minimal to required.
- Build using tetex.
python2.5 (2.5.1-1) unstable; urgency=low
* Python-2.5.1 release.
* Build-depend on gcc-4.1 (>= 4.1.2-4) on alpha, powerpc, s390, sparc.
* Merge from Ubuntu:
- Add debian/patches/subprocess-eintr-safety.dpatch (LP: #87292):
- Create and use wrappers around read(), write(), and os.waitpid() in the
subprocess module which retry the operation on an EINTR (which happens
if e. g. an alarm was raised while the system call was in progress).
It is incredibly hard and inconvenient to sensibly handle this in
applications, so let's fix this at the right level.
- Patch based on original proposal of Peter <C3><85>strand
in http://python.org/sf/1068268.
- Add two test cases.
- Change the interpreter to build and install python extensions
built with the python-dbg interpreter with a different name into
the same path (by appending `_d' to the extension name). The debug build
of the interpreter tries to first load a foo_d.so or foomodule_d.so
extension, then tries again with the normal name.
- When trying to import the profile and pstats modules, don't
exit, add a hint to the exception pointing to the python-profiler
package, don't exit.
- Keep the module version in the .egg-info name, only remove the
python version.
- python2.5-dbg: Install Misc/SpecialBuilds.txt, document the
debug changes in README.debug.
* Update to 20070425, taken from the 2.5 release branch.
python2.5 (2.5.1-0ubuntu1) feisty-proposed; urgency=low
* Python-2.5.1 release; changes compared to the release candidate:
- SF #1701207: svnversion_init assertion failed; revert bogus asserts
(added to the wrong place) from rev 52501.
- Revert SF #1615701 (rev 53655): dict.update() does *not* call
__getitem__() or keys() if subclassed. This is to remain consistent
with 2.5.
- Revert 53667, bypass set specific optimizations for set and frozenset
subclasses. This is to remain consistent with 2.5.
- Describe undocumented third argument to touchline()
* Regenerate the documentation.
-- Matthias Klose <email address hidden> Thu, 26 Apr 2007 09:06:34 +0200
-
python2.5 (2.5.1~rc1-0ubuntu3) feisty; urgency=low
* Use apport_python_hook instead of apport.python_hook to speedup
the startup time of the interpreter. Ubuntu #105764.
-- Matthias Klose <email address hidden> Thu, 12 Apr 2007 12:27:43 +0200
