Format: 1.8 Date: Mon, 12 Nov 2018 09:36:49 -0500 Source: python2.7 Binary: python2.7 libpython2.7-stdlib python2.7-minimal libpython2.7-minimal libpython2.7 python2.7-examples python2.7-dev libpython2.7-dev libpython2.7-testsuite idle-python2.7 python2.7-doc python2.7-dbg libpython2.7-dbg Architecture: i386 Version: 2.7.12-1ubuntu0~16.04.4 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: idle-python2.7 - IDE for Python (v2.7) using Tkinter libpython2.7 - Shared Python runtime library (version 2.7) libpython2.7-dbg - Debug Build of the Python Interpreter (version 2.7) libpython2.7-dev - Header files and a static library for Python (v2.7) libpython2.7-minimal - Minimal subset of the Python language (version 2.7) libpython2.7-stdlib - Interactive high-level object-oriented language (standard library libpython2.7-testsuite - Testsuite for the Python standard library (v2.7) python2.7 - Interactive high-level object-oriented language (version 2.7) python2.7-dbg - Debug Build of the Python Interpreter (version 2.7) python2.7-dev - Header files and a static library for Python (v2.7) python2.7-doc - Documentation for the high-level object-oriented language Python python2.7-examples - Examples for the Python language (v2.7) python2.7-minimal - Minimal subset of the Python language (version 2.7) Changes: python2.7 (2.7.12-1ubuntu0~16.04.4) xenial-security; urgency=medium . * SECURITY UPDATE: heap buffer overflow via race condition - debian/patches/CVE-2018-1000030-1.patch: stop crashes when iterating over a file on multiple threads in Lib/test/test_file2k.py, Objects/fileobject.c. - debian/patches/CVE-2018-1000030-2.patch: fix crash when multiple threads iterate over a file in Lib/test/test_file2k.py, Objects/fileobject.c. - CVE-2018-1000030 * SECURITY UPDATE: command injection in shutil module - debian/patches/CVE-2018-1000802.patch: use subprocess rather than distutils.spawn in Lib/shutil.py. - CVE-2018-1000802 * SECURITY UPDATE: DoS via catastrophic backtracking - debian/patches/CVE-2018-106x.patch: fix expressions in Lib/difflib.py, Lib/poplib.py. Added tests to Lib/test/test_difflib.py, Lib/test/test_poplib.py. - CVE-2018-1060 - CVE-2018-1061 * SECURITY UPDATE: incorrect Expat hash salt initialization - debian/patches/CVE-2018-14647.patch: call SetHashSalt in Include/pyexpat.h, Modules/_elementtree.c, Modules/pyexpat.c. - CVE-2018-14647 Checksums-Sha1: 554ec0173b215ddf16dfdf8134cfa937958727b9 4075436 libpython2.7-dbg_2.7.12-1ubuntu0~16.04.4_i386.deb badfd9c034cbd66ce9f027a086d929e1b36c841e 986 libpython2.7-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 2c976590b032032bdaf52858467ac193e7b1c2e2 972 libpython2.7-dev-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb b461c53f47fe2ced6429d96f5d4657394f19f3b7 27641830 libpython2.7-dev_2.7.12-1ubuntu0~16.04.4_i386.deb dc56a5bfd2d8b488eccd94e20caed5a1545fab50 866 libpython2.7-minimal-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb dcb1fdd6ff2542275c5412718e313426e37f991e 339226 libpython2.7-minimal_2.7.12-1ubuntu0~16.04.4_i386.deb 917f8611abd1bae8ba07529f411c26050642adc9 986 libpython2.7-stdlib-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 26a4f9a9ef423260585206c5c83f4c90a5d8bdc5 1898014 libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.4_i386.deb b4aad4722e3f935a87aa9cfb81de57162a746033 1094930 libpython2.7_2.7.12-1ubuntu0~16.04.4_i386.deb 74c17dc66398e661b80db3db35a60d3b9fff75c0 6954004 python2.7-dbg_2.7.12-1ubuntu0~16.04.4_i386.deb 87c9990221cc791193a66b872ed05bc0d7e2c392 276432 python2.7-dev_2.7.12-1ubuntu0~16.04.4_i386.deb 0c1b8ccc4c830d2bd378d6e97e50936862f41e18 1281138 python2.7-minimal_2.7.12-1ubuntu0~16.04.4_i386.deb 183aeaf72847e626f878e2737ac72c5f0ac10e3a 224380 python2.7_2.7.12-1ubuntu0~16.04.4_i386.deb Checksums-Sha256: 78fcb3baf4f16f56d5d1df182d40fb631384bb3b4b6973b97de586b6cc55e996 4075436 libpython2.7-dbg_2.7.12-1ubuntu0~16.04.4_i386.deb 7152594922c7d38783602722139645196a9fab033ec6974c904200cb19a5e748 986 libpython2.7-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 6d9bb327d716c24717f73f430fc595e3a6f6f60b3669168c6522a71656c00592 972 libpython2.7-dev-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 4225047c5ba621ad0e14a8fdaffb639056a00529124d754570d6c6cb081ddae1 27641830 libpython2.7-dev_2.7.12-1ubuntu0~16.04.4_i386.deb b3d148e6b77cb364fd863baa16c03c23d7df55b20920d052d5eabb8670038a94 866 libpython2.7-minimal-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 9b097be245eb4aa8b229a29613b7996ccc64eb8e8b807e046bb6c5424dfbf700 339226 libpython2.7-minimal_2.7.12-1ubuntu0~16.04.4_i386.deb 3b0700b3a3a3be3cdbedff84276da64c0ed9e9caa0629497f9234d7d5d2f92b8 986 libpython2.7-stdlib-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb ec6416d21731541fc0364c1aa5ca327c95dac25a9d4c68dabef92db860510036 1898014 libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.4_i386.deb 29bd40ecee06d75c17048ca94107c0275c1d5e98b1adcec1e88194f586baf3d7 1094930 libpython2.7_2.7.12-1ubuntu0~16.04.4_i386.deb e157c818a7446ca589f567b45815efc5d43b1b2e31d8e69133f1be7941ee83e7 6954004 python2.7-dbg_2.7.12-1ubuntu0~16.04.4_i386.deb aa87476f135920a756213d5ba600cd9b6554830af053848ddfff3ae970089c0e 276432 python2.7-dev_2.7.12-1ubuntu0~16.04.4_i386.deb 1eae0733ea2c91c89e8c4db8a018d8c1003ee0659d4362192b0a44835c7b0a03 1281138 python2.7-minimal_2.7.12-1ubuntu0~16.04.4_i386.deb 774b7de4b52f7ee008b6abd778beb55297ceeb82831776ef4b918e9e65b4e035 224380 python2.7_2.7.12-1ubuntu0~16.04.4_i386.deb Files: 77a4f66ac3993bb21a9835e65319d4c7 4075436 debug extra libpython2.7-dbg_2.7.12-1ubuntu0~16.04.4_i386.deb c77e060cf46b8c35fe08371a9a7cfccf 986 libs extra libpython2.7-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 06cbd0659f32e0f2a4fd1160b804cdfe 972 libdevel extra libpython2.7-dev-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb b0811e9d31bf625c65dbff7f3db154a1 27641830 libdevel optional libpython2.7-dev_2.7.12-1ubuntu0~16.04.4_i386.deb 1d76c546cbfa83773ab3b817fef14e1b 866 python extra libpython2.7-minimal-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb a7b3b3b0c3d15c2164a7012e93bed30c 339226 python standard libpython2.7-minimal_2.7.12-1ubuntu0~16.04.4_i386.deb 5390549df311cc864ae48cf79619de21 986 python extra libpython2.7-stdlib-dbgsym_2.7.12-1ubuntu0~16.04.4_i386.ddeb 73cb58103f948a89e1228c7502b54fd6 1898014 python standard libpython2.7-stdlib_2.7.12-1ubuntu0~16.04.4_i386.deb de437460fc23489ed4b87de49b562703 1094930 libs standard libpython2.7_2.7.12-1ubuntu0~16.04.4_i386.deb 2ae438b9de3deef383f9afa52796535c 6954004 debug extra python2.7-dbg_2.7.12-1ubuntu0~16.04.4_i386.deb 0aa45b61aa781c15d52c3741df84799a 276432 python optional python2.7-dev_2.7.12-1ubuntu0~16.04.4_i386.deb 41ab869090cc48d16331ff91bae3c2e5 1281138 python standard python2.7-minimal_2.7.12-1ubuntu0~16.04.4_i386.deb bbcd667576c5670c99f59da156697df1 224380 python standard python2.7_2.7.12-1ubuntu0~16.04.4_i386.deb Original-Maintainer: Matthias Klose