Format: 1.8 Date: Mon, 12 Nov 2018 09:36:49 -0500 Source: python2.7 Binary: python2.7 libpython2.7-stdlib python2.7-minimal libpython2.7-minimal libpython2.7 python2.7-examples python2.7-dev libpython2.7-dev libpython2.7-testsuite idle-python2.7 python2.7-doc python2.7-dbg libpython2.7-dbg Architecture: arm64 Version: 2.7.12-1ubuntu0~16.04.4 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: idle-python2.7 - IDE for Python (v2.7) using Tkinter libpython2.7 - Shared Python runtime library (version 2.7) libpython2.7-dbg - Debug Build of the Python Interpreter (version 2.7) libpython2.7-dev - Header files and a static library for Python (v2.7) libpython2.7-minimal - Minimal subset of the Python language (version 2.7) libpython2.7-stdlib - Interactive high-level object-oriented language (standard library libpython2.7-testsuite - Testsuite for the Python standard library (v2.7) python2.7 - Interactive high-level object-oriented language (version 2.7) python2.7-dbg - Debug Build of the Python Interpreter (version 2.7) python2.7-dev - Header files and a static library for Python (v2.7) python2.7-doc - Documentation for the high-level object-oriented language Python python2.7-examples - Examples for the Python language (v2.7) python2.7-minimal - Minimal subset of the Python language (version 2.7) Changes: python2.7 (2.7.12-1ubuntu0~16.04.4) xenial-security; urgency=medium . * SECURITY UPDATE: heap buffer overflow via race condition - debian/patches/CVE-2018-1000030-1.patch: stop crashes when iterating over a file on multiple threads in Lib/test/test_file2k.py, Objects/fileobject.c. - debian/patches/CVE-2018-1000030-2.patch: fix crash when multiple threads iterate over a file in Lib/test/test_file2k.py, Objects/fileobject.c. - CVE-2018-1000030 * SECURITY UPDATE: command injection in shutil module - debian/patches/CVE-2018-1000802.patch: use subprocess rather than distutils.spawn in Lib/shutil.py. - CVE-2018-1000802 * SECURITY UPDATE: DoS via catastrophic backtracking - debian/patches/CVE-2018-106x.patch: fix expressions in Lib/difflib.py, Lib/poplib.py. Added tests to Lib/test/test_difflib.py, Lib/test/test_poplib.py. - CVE-2018-1060 - CVE-2018-1061 * SECURITY UPDATE: incorrect Expat hash salt initialization - debian/patches/CVE-2018-14647.patch: call SetHashSalt in Include/pyexpat.h, Modules/_elementtree.c, Modules/pyexpat.c. - CVE-2018-14647 Checksums-Sha1: 6088f6d1ce04e8b0f705b497ece32b2f95f10da2 3892800 libpython2.7-dbg_2.7.12-1ubuntu0~16.04.4_arm64.deb 2ef5053c28e5e9fc6a34feea53b38ec9d4c78890 984 libpython2.7-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 53977d280e179a9da85fbbbb32782874bcbdc70f 972 libpython2.7-dev-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 1226a6ef180a112dd381cfa4fda19ae56809f03e 27557820 libpython2.7-dev_2.7.12-1ubuntu0~16.04.4_arm64.deb e80e4df0b3c00fe7c3cd5505c08321dfa52c17fd 864 libpython2.7-minimal-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 3e45c4953a4a9d559dfa4912b3d4fcd6fc0efd6f 339208 libpython2.7-minimal_2.7.12-1ubuntu0~16.04.4_arm64.deb 0b9c37d81b57e4663612b3bd58dd17b41595eb6c 990 libpython2.7-stdlib-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 3f481248d895f224acbdd948d94447fb31123ddf 1834020 libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.4_arm64.deb 35ed700c67dd359479716b696881d80c733e69a4 888294 libpython2.7_2.7.12-1ubuntu0~16.04.4_arm64.deb 173ca30f8ff2a1ccab06c8bd330c64ca821c6e23 7576962 python2.7-dbg_2.7.12-1ubuntu0~16.04.4_arm64.deb db942d7474a3efe66cd5b222294e48200aaa823d 276402 python2.7-dev_2.7.12-1ubuntu0~16.04.4_arm64.deb 2594137db37c85105eb0bf4d48cb84e51d4dbbe9 1129976 python2.7-minimal_2.7.12-1ubuntu0~16.04.4_arm64.deb f9694c464bfe6fa1a4211e2ab68ab352bf006bb8 223720 python2.7_2.7.12-1ubuntu0~16.04.4_arm64.deb Checksums-Sha256: 39d55683246c723a259709f7391dc506798dc4cf8da16073c88fbb9f368cac4b 3892800 libpython2.7-dbg_2.7.12-1ubuntu0~16.04.4_arm64.deb 45ca584cdc47179275813048663b1403f6632a7698ca77bad1622f0e07f1aba3 984 libpython2.7-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 82c6717b78f2281e74851acf22c53b1c7d5855d48b1e0af18587468dfd05f9cc 972 libpython2.7-dev-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 666ae5b70e8f7de076186271607f3097f61eac2eebccb9563b9ea6b3481885b3 27557820 libpython2.7-dev_2.7.12-1ubuntu0~16.04.4_arm64.deb 92659e93e0ef6e0e98e7afe100ddeaaeb20f50c91ccab528e3d4e5d8d1e7db2f 864 libpython2.7-minimal-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb d15188db1936729b807fe04b3bc8c402d391c5f69353d0e1dbd794e697653c7b 339208 libpython2.7-minimal_2.7.12-1ubuntu0~16.04.4_arm64.deb 4a0d9f1626f830defeccfaa3a145d96a02a52ee7e619047b8a081659270af5a3 990 libpython2.7-stdlib-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb b16e062771d948f3fb374c9208b271f4b10ffa8f1752c3713dc9409be2ac5e3c 1834020 libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.4_arm64.deb 7eed589103ea1006a58b804bd84657ad4db94a522631eec04899551ca21f21fc 888294 libpython2.7_2.7.12-1ubuntu0~16.04.4_arm64.deb 38ee032f9902017f935bd451eb6bb9577357a1fed21dea3565dc5c8a0732c69b 7576962 python2.7-dbg_2.7.12-1ubuntu0~16.04.4_arm64.deb 294f8eeb9e1b8e2dfe008a11f323121aa709e1bf9e10659b3ab649ab58931df5 276402 python2.7-dev_2.7.12-1ubuntu0~16.04.4_arm64.deb 6c1e6a187240c1d5ba56e55ee5fa0408ed212e4b5ed2b281933adef295dcabb9 1129976 python2.7-minimal_2.7.12-1ubuntu0~16.04.4_arm64.deb 8525552fbcc6622a596bbf6c301b41b787c66497318cfb64925f7d2c2459dc9b 223720 python2.7_2.7.12-1ubuntu0~16.04.4_arm64.deb Files: 0c6890054ac077844174e80e01ec29f8 3892800 debug extra libpython2.7-dbg_2.7.12-1ubuntu0~16.04.4_arm64.deb 11769bf2f6c70489d5f81b6f088e6be7 984 libs extra libpython2.7-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 797903ff5ee35b1d9cfcdcc268e8e4e8 972 libdevel extra libpython2.7-dev-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 8c92de1734fc20a1654c83601168db8a 27557820 libdevel optional libpython2.7-dev_2.7.12-1ubuntu0~16.04.4_arm64.deb 6e1587bec3afeb45b2e0c3ee6d49667d 864 python extra libpython2.7-minimal-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb 3b75b140a44dde121ca1d76cca1f3fe6 339208 python standard libpython2.7-minimal_2.7.12-1ubuntu0~16.04.4_arm64.deb 502a2e1ce1b6d8f262347111fd08b3b3 990 python extra libpython2.7-stdlib-dbgsym_2.7.12-1ubuntu0~16.04.4_arm64.ddeb e7022f21d1689f66d17039acac52bb7a 1834020 python standard libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.4_arm64.deb 319653f00dad508287e6f056e15bd1a5 888294 libs standard libpython2.7_2.7.12-1ubuntu0~16.04.4_arm64.deb d4631e69169c41c9dd6fcee7474948c7 7576962 debug extra python2.7-dbg_2.7.12-1ubuntu0~16.04.4_arm64.deb 7fced4a689dad41f64a86f7ddc4f3df1 276402 python optional python2.7-dev_2.7.12-1ubuntu0~16.04.4_arm64.deb f3b4941b6605575033dcdef575074db2 1129976 python standard python2.7-minimal_2.7.12-1ubuntu0~16.04.4_arm64.deb 1e886b5ffd9268b41bfe3c29a6cd2d92 223720 python standard python2.7_2.7.12-1ubuntu0~16.04.4_arm64.deb Original-Maintainer: Matthias Klose