Format: 1.8 Date: Tue, 09 Jul 2019 12:43:02 -0400 Source: python2.7 Binary: idle-python2.7 libpython2.7 libpython2.7-dbg libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dbg python2.7-dev python2.7-doc python2.7-examples python2.7-minimal Architecture: all amd64 Version: 2.7.16-2ubuntu0.1 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: idle-python2.7 - IDE for Python (v2.7) using Tkinter libpython2.7 - Shared Python runtime library (version 2.7) libpython2.7-dbg - Debug Build of the Python Interpreter (version 2.7) libpython2.7-dev - Header files and a static library for Python (v2.7) libpython2.7-minimal - Minimal subset of the Python language (version 2.7) libpython2.7-stdlib - Interactive high-level object-oriented language (standard library libpython2.7-testsuite - Testsuite for the Python standard library (v2.7) python2.7 - Interactive high-level object-oriented language (version 2.7) python2.7-dbg - Debug Build of the Python Interpreter (version 2.7) python2.7-dev - Header files and a static library for Python (v2.7) python2.7-doc - Documentation for the high-level object-oriented language Python python2.7-examples - Examples for the Python language (v2.7) python2.7-minimal - Minimal subset of the Python language (version 2.7) Launchpad-Bugs-Fixed: 1835135 Changes: python2.7 (2.7.16-2ubuntu0.1) disco-security; urgency=medium . * SECURITY UPDATE: incorrect cookie domain check - debian/patches/CVE-2018-20852.patch: prefix dot in domain for proper subdomain validation in Lib/cookielib.py, Lib/test/test_cookielib.py. - CVE-2018-20852 * SECURITY UPDATE: HTTP header injection - debian/patches/CVE-2019-9740.patch: disallow control chars in http URLs in Lib/httplib.py, Lib/test/test_urllib.py, Lib/test/test_urllib2.py, Lib/test/test_xmlrpc.py. - CVE-2019-9740 - CVE-2019-9947 * SECURITY UPDATE: incomplete fix for CVE-2019-9636 - debian/patches/CVE-2019-10160-1.patch: fix handling of pre-normalization characters in urlsplit() in Lib/test/test_urlparse.py, Lib/urlparse.py. - debian/patches/CVE-2019-10160-2.patch: correct fix to handle decomposition in usernames in Lib/test/test_urlparse.py, Lib/urlparse.py. - debian/patches/CVE-2019-10160-3.patch: fix urlparse.urlsplit() error message for Unicode URL in Lib/test/test_urlparse.py, Lib/urlparse.py. - CVE-2019-10160 * debian/patches/issue36216-2.diff: only print test messages when verbose in Lib/test/test_urlparse.py. * debian/patches/issue9146.diff: fix FIPS mode environments where MD5 isn't available in Modules/_hashopenssl.c. (LP: #1835135) Checksums-Sha1: 08641998de28a7163480329b32ab28e28e428f7c 259932 idle-python2.7_2.7.16-2ubuntu0.1_all.deb 874239d267d9ab47e16926553555bfcc9f9d4ec5 4901360 libpython2.7-dbg_2.7.16-2ubuntu0.1_amd64.deb 62ccdc93d282bce463351f5260b109db7b9ab44e 31586632 libpython2.7-dev_2.7.16-2ubuntu0.1_amd64.deb a89755c0eba3e11af496dd4890f08aeeb02a825d 335544 libpython2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb ea34f5314fe254c2f6d784ad66cc5673897da148 1911768 libpython2.7-stdlib_2.7.16-2ubuntu0.1_amd64.deb c9edcf0923d7e65ffed636ecf750f9c2fea8f717 2160760 libpython2.7-testsuite_2.7.16-2ubuntu0.1_all.deb b76c1ea6e7e7631ac36b9a0300e4ba2100ad62fc 1036160 libpython2.7_2.7.16-2ubuntu0.1_amd64.deb 42ced9f7a7bef8cba36d40eeb86471ebd9d3119b 9617788 python2.7-dbg_2.7.16-2ubuntu0.1_amd64.deb 21bd02d1adabefc2fed9c82da480f47e3b32e904 278860 python2.7-dev_2.7.16-2ubuntu0.1_amd64.deb be7b6216c8b4e1133008ac48bc97096c2f4ddb0c 4347328 python2.7-doc_2.7.16-2ubuntu0.1_all.deb 6f2dd385d8bdc76fb48e3e276ea53fe223363cc2 656260 python2.7-examples_2.7.16-2ubuntu0.1_all.deb d3a74ef945a4babd4fff1803c0e3ab1977d7dc1a 1310404 python2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb f2eebc0f7afd828c5614d0693cb85a7c9153f7b2 14132 python2.7_2.7.16-2ubuntu0.1_amd64.buildinfo 261457bec49362481ef3c5b06cf2286182f2441b 243908 python2.7_2.7.16-2ubuntu0.1_amd64.deb Checksums-Sha256: 9061a23b515cc8d09a1bbdf16bf00767888a38f98efb3198f27dd97460cab802 259932 idle-python2.7_2.7.16-2ubuntu0.1_all.deb f2cf2fefa5261cfd152cc554bd820bf31e965a1c4855a89316b8646757d09990 4901360 libpython2.7-dbg_2.7.16-2ubuntu0.1_amd64.deb c54b59e3f3c0a854f511a6343fe6c27fea91d38ad5a6564fd76b25954420f633 31586632 libpython2.7-dev_2.7.16-2ubuntu0.1_amd64.deb da0970622192d551e2cfabc91e827dc05bb24e35b52b9145ae34940ca2404160 335544 libpython2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb 2c1cdb350929743ef64e48098d1bb8e8a7ffa2cbcf51832f18d720ae299694f5 1911768 libpython2.7-stdlib_2.7.16-2ubuntu0.1_amd64.deb d19cf48ed0c02a2d69b16455db40bf5917ae0575f5c0ec3f80b8f9b34b803cac 2160760 libpython2.7-testsuite_2.7.16-2ubuntu0.1_all.deb cb8d00f3052a0afb8c1d5d61fd531f7ee4c3d473e79ff70577ff9c9d7788bfa2 1036160 libpython2.7_2.7.16-2ubuntu0.1_amd64.deb 0b3370f90628852d35f2b7a4505cc037b3722ef9aa180c7ce16477188b42cec9 9617788 python2.7-dbg_2.7.16-2ubuntu0.1_amd64.deb e329bdc2dcac279b1052998e5db2da945051ce5f6192cdb8b342abd0ce87b887 278860 python2.7-dev_2.7.16-2ubuntu0.1_amd64.deb 3391b487f0a2debf53b133e306c027c1a3e26dcdcb3cc6517b84422c9439ad42 4347328 python2.7-doc_2.7.16-2ubuntu0.1_all.deb 01e93e95db161bf83d58f39ed5d77fd5232dff58a0cf6d2fff31e54368bd6db9 656260 python2.7-examples_2.7.16-2ubuntu0.1_all.deb 632c2459ef1c4ff9982879cdf90a610e20760e565b2f2b280ba115586f354749 1310404 python2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb 456aec95e0d3df593b29ad98a9ccda44a36079912a408fd7f8a174ec76a50555 14132 python2.7_2.7.16-2ubuntu0.1_amd64.buildinfo b7444e00966ef597e531536d50c3ae8d7c05a35c1e3dba5134ac01dd9c0309ce 243908 python2.7_2.7.16-2ubuntu0.1_amd64.deb Files: 9bb51129da8bc30e30c62527aa7e3840 259932 python optional idle-python2.7_2.7.16-2ubuntu0.1_all.deb 155101be47ae0bb85adbb612059be216 4901360 debug optional libpython2.7-dbg_2.7.16-2ubuntu0.1_amd64.deb b41e6c2490b022f934e75d5b0d20da9f 31586632 libdevel optional libpython2.7-dev_2.7.16-2ubuntu0.1_amd64.deb becc86e96c0c77108e8abcd9ae1f61a5 335544 python optional libpython2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb 563a640273dea1a7bd22adf0d985eb9f 1911768 python optional libpython2.7-stdlib_2.7.16-2ubuntu0.1_amd64.deb 929efe66d086b054d5f3d5fdde894ebf 2160760 libdevel optional libpython2.7-testsuite_2.7.16-2ubuntu0.1_all.deb 9ad8378caf957745afa759f2e46d672f 1036160 libs optional libpython2.7_2.7.16-2ubuntu0.1_amd64.deb 449a0e3c8091f82cb0afff58ac05b878 9617788 debug optional python2.7-dbg_2.7.16-2ubuntu0.1_amd64.deb 771d2d828a2fbc8dc57f0f54448d978e 278860 python optional python2.7-dev_2.7.16-2ubuntu0.1_amd64.deb be90bbe2b2e6c2e8c4d76a6f067747cc 4347328 doc optional python2.7-doc_2.7.16-2ubuntu0.1_all.deb 5b611702ba5ec377d326e1633907f088 656260 python optional python2.7-examples_2.7.16-2ubuntu0.1_all.deb 0f319c126c57192fb807b048b29bfae4 1310404 python optional python2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb ec8571b6d90ad18e83b374e820221926 14132 python optional python2.7_2.7.16-2ubuntu0.1_amd64.buildinfo 555fd01bf88d457c54f83bc89f7d44fc 243908 python optional python2.7_2.7.16-2ubuntu0.1_amd64.deb Original-Maintainer: Matthias Klose