Format: 1.8 Date: Tue, 20 Aug 2019 13:04:43 -0400 Source: python3.7 Binary: libpython3.7 libpython3.7-dbg libpython3.7-dev libpython3.7-minimal libpython3.7-stdlib python3.7 python3.7-dbg python3.7-dev python3.7-minimal python3.7-venv Architecture: s390x Version: 3.7.3-2ubuntu0.1 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libpython3.7 - Shared Python runtime library (version 3.7) libpython3.7-dbg - Debug Build of the Python Interpreter (version 3.7) libpython3.7-dev - Header files and a static library for Python (v3.7) libpython3.7-minimal - Minimal subset of the Python language (version 3.7) libpython3.7-stdlib - Interactive high-level object-oriented language (standard library python3.7 - Interactive high-level object-oriented language (version 3.7) python3.7-dbg - Debug Build of the Python Interpreter (version 3.7) python3.7-dev - Header files and a static library for Python (v3.7) python3.7-minimal - Minimal subset of the Python language (version 3.7) python3.7-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.7 (3.7.3-2ubuntu0.1) disco-security; urgency=medium . * SECURITY UPDATE: HTTP header injection - debian/patches/CVE-2019-9740.patch: disallow control chars in http URLs in Lib/http/client.py, Lib/test/test_urllib.py, Lib/test/test_xmlrpc.py. - CVE-2019-9740 - CVE-2019-9947 * SECURITY UPDATE: urllib support the local_file: scheme - debian/patches/CVE-2019-9948.patch: disallow file reading in Lib/urllib/request.py, Lib/test/test_urllib.py. - CVE-2019-9948 * SECURITY UPDATE: incomplete fix for CVE-2019-9636 - debian/patches/CVE-2019-10160-1.patch: fix handling of pre-normalization characters in urlsplit() in Lib/test/test_urlparse.py, Lib/urllib/parse.py. - debian/patches/CVE-2019-10160-2.patch: correct fix to handle decomposition in usernames in Lib/test/test_urlparse.py, Lib/urllib/parse.py. - CVE-2019-10160 Checksums-Sha1: e11cdeb0ad58cee7d9cc425a3bd177f304e61805 10996360 libpython3.7-dbg_3.7.3-2ubuntu0.1_s390x.deb f7d07e1c832c835f048181c6f125395b1147b6b0 47797708 libpython3.7-dev_3.7.3-2ubuntu0.1_s390x.deb 84e88c2904962177c4056152bcd07a72d513a1ec 543020 libpython3.7-minimal_3.7.3-2ubuntu0.1_s390x.deb d0d4d48357aba4591574cab29d55e7e75ca303b1 1688324 libpython3.7-stdlib_3.7.3-2ubuntu0.1_s390x.deb 121aae2536f690bf9559628a3b27f08a25f4742b 1369108 libpython3.7_3.7.3-2ubuntu0.1_s390x.deb c255d83d35eb9ed20b960eda53eb4e9bb825ed53 16260764 python3.7-dbg_3.7.3-2ubuntu0.1_s390x.deb b28638aae57640e78fb070aa746162ac720dcf9f 510432 python3.7-dev_3.7.3-2ubuntu0.1_s390x.deb 6b9bd129c6adecad653efb566153e411eb8b05e5 1560148 python3.7-minimal_3.7.3-2ubuntu0.1_s390x.deb 8db15d45dcd2868cf51ac4f3de59eb302c16efd1 6192 python3.7-venv_3.7.3-2ubuntu0.1_s390x.deb 5412d145caf1d9c95420bede1b9cef4e1d9e27c6 11612 python3.7_3.7.3-2ubuntu0.1_s390x.buildinfo 6de3880064e8e34e6e248e9c96a27b5f45f89ed0 283948 python3.7_3.7.3-2ubuntu0.1_s390x.deb Checksums-Sha256: 60fac6b80d14a47e1c718cfcff38be184de2827fbc5d44667c360dc09aa3d68c 10996360 libpython3.7-dbg_3.7.3-2ubuntu0.1_s390x.deb 4b36384336034057412bb55e20611fd09237ff1e31a17cfeec562a38a4a945d6 47797708 libpython3.7-dev_3.7.3-2ubuntu0.1_s390x.deb 9f5065232bb605fe6e10342601e87d7f4dda0355c97791ae966bbacf6c4b1cdc 543020 libpython3.7-minimal_3.7.3-2ubuntu0.1_s390x.deb 28b5e11b1cc504a7251b0f4634d5c7cdb2a98423cffc6189d58cf717a0aa62c5 1688324 libpython3.7-stdlib_3.7.3-2ubuntu0.1_s390x.deb 05452eeec7cdfa613751401528626b8e0ea53abf99921a07163845708b92575c 1369108 libpython3.7_3.7.3-2ubuntu0.1_s390x.deb 5cd3c8a60e05896736b2e8f8fa74cea310a1471d1623b05fff95d9bf69118182 16260764 python3.7-dbg_3.7.3-2ubuntu0.1_s390x.deb e5eb42c0a3fce472453c8f04de2c11ee8ad7364187e2e57290126b1c379af625 510432 python3.7-dev_3.7.3-2ubuntu0.1_s390x.deb 71d270f71081493847b3ce647496281d69f3db741f6b45e424b34b5a4b15e18c 1560148 python3.7-minimal_3.7.3-2ubuntu0.1_s390x.deb 528f43c4a299d36bf12b6667905830466b4ce6b1db70cbe7c8f83ba720c847d8 6192 python3.7-venv_3.7.3-2ubuntu0.1_s390x.deb 80ff23bea9fe74da5cd980c3c3b46464370fafe9c33793315c3c800c33c8b02f 11612 python3.7_3.7.3-2ubuntu0.1_s390x.buildinfo ec6a08b9acb3efe72db3f1989ceb4c0d87be4464d4a6fb0128cff73f887269b7 283948 python3.7_3.7.3-2ubuntu0.1_s390x.deb Files: 8a0096620c31c4104b7f6d6a10f142a0 10996360 debug optional libpython3.7-dbg_3.7.3-2ubuntu0.1_s390x.deb 8cd68dc3fe9ac3e9f6b07c0893d3dd77 47797708 libdevel optional libpython3.7-dev_3.7.3-2ubuntu0.1_s390x.deb 820becf69030c6937921855db9b8b0f3 543020 python optional libpython3.7-minimal_3.7.3-2ubuntu0.1_s390x.deb 69120fa0357f0d793672c35520f04db1 1688324 python optional libpython3.7-stdlib_3.7.3-2ubuntu0.1_s390x.deb b241825c87f593b9f094f711f11884e0 1369108 libs optional libpython3.7_3.7.3-2ubuntu0.1_s390x.deb 3feabbd2940ba881e524f841e9b7550e 16260764 debug optional python3.7-dbg_3.7.3-2ubuntu0.1_s390x.deb c3e8ed90800895b8d5e2d00498b6a435 510432 python optional python3.7-dev_3.7.3-2ubuntu0.1_s390x.deb 47e0a7302e37cd4668f4c52d87a53376 1560148 python optional python3.7-minimal_3.7.3-2ubuntu0.1_s390x.deb 49ae89620cfaa6e880ebd8e14c36938a 6192 python optional python3.7-venv_3.7.3-2ubuntu0.1_s390x.deb 28821cd0e6fc6564eb6283c77d078789 11612 python optional python3.7_3.7.3-2ubuntu0.1_s390x.buildinfo f5ac6df73e48ac3e8dc2f4f2461071d9 283948 python optional python3.7_3.7.3-2ubuntu0.1_s390x.deb Original-Maintainer: Matthias Klose