Format: 1.8 Date: Mon, 12 Nov 2018 11:49:11 -0500 Source: python2.7 Binary: python2.7 libpython2.7-stdlib python2.7-minimal libpython2.7-minimal libpython2.7 python2.7-examples python2.7-dev libpython2.7-dev libpython2.7-testsuite idle-python2.7 python2.7-doc python2.7-dbg libpython2.7-dbg Architecture: all i386 Version: 2.7.6-8ubuntu0.5 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: idle-python2.7 - IDE for Python (v2.7) using Tkinter libpython2.7 - Shared Python runtime library (version 2.7) libpython2.7-dbg - Debug Build of the Python Interpreter (version 2.7) libpython2.7-dev - Header files and a static library for Python (v2.7) libpython2.7-minimal - Minimal subset of the Python language (version 2.7) libpython2.7-stdlib - Interactive high-level object-oriented language (standard library libpython2.7-testsuite - Testsuite for the Python standard library (v2.7) python2.7 - Interactive high-level object-oriented language (version 2.7) python2.7-dbg - Debug Build of the Python Interpreter (version 2.7) python2.7-dev - Header files and a static library for Python (v2.7) python2.7-doc - Documentation for the high-level object-oriented language Python python2.7-examples - Examples for the Python language (v2.7) python2.7-minimal - Minimal subset of the Python language (version 2.7) Changes: python2.7 (2.7.6-8ubuntu0.5) trusty-security; urgency=medium . * SECURITY UPDATE: heap buffer overflow via race condition - debian/patches/CVE-2018-1000030-1.patch: stop crashes when iterating over a file on multiple threads in Lib/test/test_file2k.py, Objects/fileobject.c. - debian/patches/CVE-2018-1000030-2.patch: fix crash when multiple threads iterate over a file in Lib/test/test_file2k.py, Objects/fileobject.c. - CVE-2018-1000030 * SECURITY UPDATE: command injection in shutil module - debian/patches/CVE-2018-1000802.patch: use subprocess rather than distutils.spawn in Lib/shutil.py. - CVE-2018-1000802 * SECURITY UPDATE: DoS via catastrophic backtracking - debian/patches/CVE-2018-106x.patch: fix expressions in Lib/difflib.py, Lib/poplib.py. Added tests to Lib/test/test_difflib.py, Lib/test/test_poplib.py. - CVE-2018-1060 - CVE-2018-1061 * SECURITY UPDATE: incorrect Expat hash salt initialization - debian/patches/CVE-2018-14647.patch: call SetHashSalt in Include/pyexpat.h, Modules/_elementtree.c, Modules/pyexpat.c. - CVE-2018-14647 Checksums-Sha1: 4044f93a0b56d55a5944458ef16996df9ad08bd2 550040 python2.7-examples_2.7.6-8ubuntu0.5_all.deb 9a1214b20f5847fd00609047fa49e75b355da58a 2009846 libpython2.7-testsuite_2.7.6-8ubuntu0.5_all.deb 60c6ee57702f39b247b2503ea1c248db6983cccc 223060 idle-python2.7_2.7.6-8ubuntu0.5_all.deb f684c7826c49b339d0bddb085fbf11326b627421 4178942 python2.7-doc_2.7.6-8ubuntu0.5_all.deb 0cf78f1620ea61b5afc455709178ea38eb0aa1c9 196722 python2.7_2.7.6-8ubuntu0.5_i386.deb 278bdcaa081a97083218e5498d8df48b7759815f 1843358 libpython2.7-stdlib_2.7.6-8ubuntu0.5_i386.deb 8c86b876e8a4d1ad485bd058d4d1dd30b6a20eb7 1112776 python2.7-minimal_2.7.6-8ubuntu0.5_i386.deb f231b9120b59ddcd884a7fc3311759197bcac990 308166 libpython2.7-minimal_2.7.6-8ubuntu0.5_i386.deb 59ea5fc2857cee794d06f4fedb06262ba082cae4 978618 libpython2.7_2.7.6-8ubuntu0.5_i386.deb 380daeea5ad931bc6a5bef07d75cb3c09b0cb7e8 269226 python2.7-dev_2.7.6-8ubuntu0.5_i386.deb 79f4f4ead337ca1d094f3f0ae8415711be1143f5 21780898 libpython2.7-dev_2.7.6-8ubuntu0.5_i386.deb efddb06a93fd5e6ac2807a33a4d2b4b3e4d55a38 5999584 python2.7-dbg_2.7.6-8ubuntu0.5_i386.deb 4ef7ac2ed5d2e3d7549cc364e5b1fb3f75f39755 3883574 libpython2.7-dbg_2.7.6-8ubuntu0.5_i386.deb 59faaf98e05c2bff56708de7e5bd67578a47f226 902 python2.7-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 0a3d391f623f5de68050568f597aecf5eaaed136 982 libpython2.7-stdlib-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 3a3c799530527db7e84e1f9fa78b462920657366 908 python2.7-minimal-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 1b76aa16dc23687bfff2c59cfffd9089be152644 856 libpython2.7-minimal-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 97feeb6da516fc71ac98a62b91ea71de6c35b6bb 974 libpython2.7-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 53d0d666ba48b9c75bb91a2235e6a3faca96980b 902 python2.7-dev-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 0a5225fce05ec4e78e91f215719c7afdfe2c3f10 960 libpython2.7-dev-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb Checksums-Sha256: 5b9a3160d246175d24b1b57b4f07bcf378a897f3229343a99c2bf62976b6053d 550040 python2.7-examples_2.7.6-8ubuntu0.5_all.deb 316eff03618613de4d4ec07e646a39b4d34e68b1bc3011cce85aa50c395a612c 2009846 libpython2.7-testsuite_2.7.6-8ubuntu0.5_all.deb f4569360a0bc7635a44f8b99abd95e1e1f4b2810630fd5bbb85f8d05167049ba 223060 idle-python2.7_2.7.6-8ubuntu0.5_all.deb 3265c1bffe590abf14a7cb994cb8b472991411a138e4cdf6b92924480afabd16 4178942 python2.7-doc_2.7.6-8ubuntu0.5_all.deb 1fca989b370da2bcc5b94f7b9e17a3c4d3f5bc7d222136e8752c0b55820c601a 196722 python2.7_2.7.6-8ubuntu0.5_i386.deb 065de6be09a74e1fc8aec61c512ef38c1f8d4ea21a04b38a2630af4d7db39bc0 1843358 libpython2.7-stdlib_2.7.6-8ubuntu0.5_i386.deb ce23c909c8595371b92d51b76f3f3096190b8e4f4446be10d0ebc1b96164fd05 1112776 python2.7-minimal_2.7.6-8ubuntu0.5_i386.deb 97cd3388e7beaee83265ca576c175034009f6dcf2d32a7c54190f1eaa5e28689 308166 libpython2.7-minimal_2.7.6-8ubuntu0.5_i386.deb 2b9be21a267df2871f3f81ff3e6f1e2ba2296d57ddfdc979948f46c3ef5bc55e 978618 libpython2.7_2.7.6-8ubuntu0.5_i386.deb 533ba8da38871b70a4e8b7993f65b988144c4efb7a0dad0359c0e5062ae93945 269226 python2.7-dev_2.7.6-8ubuntu0.5_i386.deb 41097b74fa8372c1bcfe81056e0d77b352a10f5a2826e5259eaec06e218ff6c1 21780898 libpython2.7-dev_2.7.6-8ubuntu0.5_i386.deb fc3e9078ff12fdf332728830b5d93234aaf4869499dffc401f07c5af245bb659 5999584 python2.7-dbg_2.7.6-8ubuntu0.5_i386.deb 0a878bb7ed1b40da1e9a25c2363165c7332fe5d6930614b33fb4e4347110d7d3 3883574 libpython2.7-dbg_2.7.6-8ubuntu0.5_i386.deb 091317a20cf16ab68833ad593cf1548c8efcb82c0d6bd42a5c6fafe26257874e 902 python2.7-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 74d9e35a3d80995c3136b036cacad6b55fcc3661662539a04455545dabf1e845 982 libpython2.7-stdlib-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb bce4eeb74b3a4b2fb1ed230a0b63fa09e9ef4b31a91ca49c4d44e5f4041ae46c 908 python2.7-minimal-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 0a6d7d3db5f5856f0b7fba69d8e83e0f74d8a342caec6707b627b06716b4152c 856 libpython2.7-minimal-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb aec7f1eb3ae8fc6784b360e76fe06ecf09f1fea32072164b7cd42866dcf56eee 974 libpython2.7-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 5f7f5c152be647b461fdc8659b8127445a570a78f9f80da27a7a1d3172a3747f 902 python2.7-dev-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 934723263247c3efae87995192a0e1d5878cd182ce9bb48a109bf3a2574d9427 960 libpython2.7-dev-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb Files: 2e9cdfba618a376bf741cbcee2de4694 550040 python optional python2.7-examples_2.7.6-8ubuntu0.5_all.deb 286723f59b3481f5bc1c1e5796d51580 2009846 libdevel optional libpython2.7-testsuite_2.7.6-8ubuntu0.5_all.deb 40030a2cf5eb4eb409663da3be33cd21 223060 python optional idle-python2.7_2.7.6-8ubuntu0.5_all.deb 8c222135a8685c1108f28d473379deb7 4178942 doc optional python2.7-doc_2.7.6-8ubuntu0.5_all.deb b10df3de61b3bbc08622190cc4af1e51 196722 python standard python2.7_2.7.6-8ubuntu0.5_i386.deb 8a2fca04ea9eb78ff9fbaf75cfbbf224 1843358 python standard libpython2.7-stdlib_2.7.6-8ubuntu0.5_i386.deb 51f73da808d323ed47180bbee93306c4 1112776 python standard python2.7-minimal_2.7.6-8ubuntu0.5_i386.deb 7d537926fd792612759f6075251342ba 308166 python standard libpython2.7-minimal_2.7.6-8ubuntu0.5_i386.deb bcd75bb877c725ec6f63a186ab176811 978618 libs standard libpython2.7_2.7.6-8ubuntu0.5_i386.deb c25f25952dc2e4775dcebb98ecdc215d 269226 python optional python2.7-dev_2.7.6-8ubuntu0.5_i386.deb aa5c44f4867ddfae25a79cabcc457b8f 21780898 libdevel optional libpython2.7-dev_2.7.6-8ubuntu0.5_i386.deb 89fc7add3f6f22cc62d582a39053170d 5999584 debug extra python2.7-dbg_2.7.6-8ubuntu0.5_i386.deb 3c2d8b5c6e99311d62bd29adec49a456 3883574 debug extra libpython2.7-dbg_2.7.6-8ubuntu0.5_i386.deb d81f5b4c0c10e7346f7c7d7cc0a7d453 902 python extra python2.7-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb b58067eb91803b14bc8fc56d57ce4cd2 982 python extra libpython2.7-stdlib-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 3da54d60908e3a4e5f6db1fc5ec43fe8 908 python extra python2.7-minimal-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 343da7f16844f8c41eb5a91e589e9e6f 856 python extra libpython2.7-minimal-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 217cdd8f7c417bc18a17542b63b1602a 974 libs extra libpython2.7-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb a585d2dcf426d987ab7acaa5aeabcb06 902 python extra python2.7-dev-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb 12c3a3359b056f3bdc953fbf3ed728e7 960 libdevel extra libpython2.7-dev-dbgsym_2.7.6-8ubuntu0.5_i386.ddeb Original-Maintainer: Matthias Klose