Format: 1.8 Date: Thu, 09 Dec 2021 12:53:27 -0500 Source: python3.8 Binary: python3.8 python3.8-venv libpython3.8-stdlib python3.8-minimal libpython3.8-minimal libpython3.8 python3.8-examples python3.8-dev libpython3.8-dev libpython3.8-testsuite idle-python3.8 python3.8-doc python3.8-dbg libpython3.8-dbg Architecture: s390x Version: 3.8.0-3ubuntu1~18.04.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Ian Constantin Description: idle-python3.8 - IDE for Python (v3.8) using Tkinter libpython3.8 - Shared Python runtime library (version 3.8) libpython3.8-dbg - Debug Build of the Python Interpreter (version 3.8) libpython3.8-dev - Header files and a static library for Python (v3.8) libpython3.8-minimal - Minimal subset of the Python language (version 3.8) libpython3.8-stdlib - Interactive high-level object-oriented language (standard library libpython3.8-testsuite - Testsuite for the Python standard library (v3.8) python3.8 - Interactive high-level object-oriented language (version 3.8) python3.8-dbg - Debug Build of the Python Interpreter (version 3.8) python3.8-dev - Header files and a static library for Python (v3.8) python3.8-doc - Documentation for the high-level object-oriented language Python python3.8-examples - Examples for the Python language (v3.8) python3.8-minimal - Minimal subset of the Python language (version 3.8) python3.8-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.8 (3.8.0-3ubuntu1~18.04.2) bionic-security; urgency=medium . * SECURITY UPDATE: Regular Expression Denial of Service - debian/patches/CVE-2020-8492.patch: updates a regular expression in the urllib.request.AbsatrctBasicAuthHandler class which allows for catastrophic backtracking and could result in a Denial of Service condition. - CVE-2020-8492 * SECURITY UPDATE: Regular Expression Denial of Service - debian/patches/CVE-2021-3733.patch: updates a regular expression in the urllib.request.AbstractBasicAuthHandler class which has a quadratic worst-case time complexity and could be abused by a malicious HTTP server to cause a Denial of Service condition for a client. - CVE-2021-3733 * SECURITY UPDATE: Denial of Service - debian/patches/CVE-2021-3737.patch: addresses the potential for the urllib http client to enter into an infinite loop and hang on a 100 Continue response from a malicious server. - debian/patches/CVE-2021-3737_test-fix.patch: improves the regression test in Lib/test/test_httplib.py - CVE-2021-3737 Checksums-Sha1: af8c911f0da657621d67c92057bbcd2a79228556 12466628 libpython3.8-dbg_3.8.0-3ubuntu1~18.04.2_s390x.deb e38fb4bc0c6f48a9dfc56ecd76398c938f7dda0e 53737288 libpython3.8-dev_3.8.0-3ubuntu1~18.04.2_s390x.deb 71f49c6ed81942b256436324bf2f08294a913045 701736 libpython3.8-minimal_3.8.0-3ubuntu1~18.04.2_s390x.deb 52368a1e904b4977f94c210c0f57901c9a6c6fef 1627336 libpython3.8-stdlib_3.8.0-3ubuntu1~18.04.2_s390x.deb 94e1c80bb96f265cb34cb4611d707a774fceb983 1480468 libpython3.8_3.8.0-3ubuntu1~18.04.2_s390x.deb 1a48eaced719f58117e97ec4cb85a390fb5d2a9b 18981484 python3.8-dbg_3.8.0-3ubuntu1~18.04.2_s390x.deb 2235bfe00b1476e87b7d6c03f4ca6642aac839db 509908 python3.8-dev_3.8.0-3ubuntu1~18.04.2_s390x.deb c3c6f9563fcad02ccc21e56a39bb85c0dd45227f 1657792 python3.8-minimal_3.8.0-3ubuntu1~18.04.2_s390x.deb df1cecc6d0205c4eb5f116b9294d3eefaa23a965 5304 python3.8-venv_3.8.0-3ubuntu1~18.04.2_s390x.deb b37a7a71f2c7d797cd5d6ec5042db685b88f3102 12820 python3.8_3.8.0-3ubuntu1~18.04.2_s390x.buildinfo 276848f6ab942d3b7105a7f35e2451094aacc636 354840 python3.8_3.8.0-3ubuntu1~18.04.2_s390x.deb Checksums-Sha256: 888614d13c07c5dfb034a6acafbf0654324386eeda405e81a025937b4b0c1e20 12466628 libpython3.8-dbg_3.8.0-3ubuntu1~18.04.2_s390x.deb 25a996ef463a2afaa662b9cea51e30236f71847c57108cbcc2a099b51f3b22a8 53737288 libpython3.8-dev_3.8.0-3ubuntu1~18.04.2_s390x.deb 30f88f8a3fc7f45bfd3e7dc3caaeb158ae0360e19ae883ba856e4dd64e68a526 701736 libpython3.8-minimal_3.8.0-3ubuntu1~18.04.2_s390x.deb b52b9a59aa0a2a63aa8cf18242084c43cd0a43ef5b529acf57ca7cc96ea9ae87 1627336 libpython3.8-stdlib_3.8.0-3ubuntu1~18.04.2_s390x.deb 3f582d281ea65712060d8afae88a5b239128b0c0a0aa36d25340ecb5eca2e651 1480468 libpython3.8_3.8.0-3ubuntu1~18.04.2_s390x.deb 50ba8831fbbea10a5269c20ff1ae89492b94a262c5129f110d3871c071a7e50c 18981484 python3.8-dbg_3.8.0-3ubuntu1~18.04.2_s390x.deb 4da9b2751d5c7061cb59aa11f8ccaf4c5e680b1701e884c896e974ba835ca29e 509908 python3.8-dev_3.8.0-3ubuntu1~18.04.2_s390x.deb a927be2131514f099fdcce5b395eb0edb71649c976c1784ad29c851cdd5f4b3b 1657792 python3.8-minimal_3.8.0-3ubuntu1~18.04.2_s390x.deb cdc1b4605ad1588a4b309a6d6a90d6fef828b055498205b984b686164202f744 5304 python3.8-venv_3.8.0-3ubuntu1~18.04.2_s390x.deb e8d3bac5075bea038321c292f2ea6b1f85b1f2c4ef0f2c95a02bd1018511bd8a 12820 python3.8_3.8.0-3ubuntu1~18.04.2_s390x.buildinfo 7f965bfc598a81ee1e6f0d458c438c88c62beb2dad1279b268872bed4fc871cd 354840 python3.8_3.8.0-3ubuntu1~18.04.2_s390x.deb Files: b6f43b06c0b6946fa8bb1e5882fc7442 12466628 debug optional libpython3.8-dbg_3.8.0-3ubuntu1~18.04.2_s390x.deb f986b624174a2fe9f063b78bce693b8c 53737288 libdevel optional libpython3.8-dev_3.8.0-3ubuntu1~18.04.2_s390x.deb 68acb2bd56614fe6eb1a802e7fa90c28 701736 python optional libpython3.8-minimal_3.8.0-3ubuntu1~18.04.2_s390x.deb 6dbafc08da32df00ec9efe95b6c2956d 1627336 python optional libpython3.8-stdlib_3.8.0-3ubuntu1~18.04.2_s390x.deb aa12d690846b170a3c362bd317a48d43 1480468 libs optional libpython3.8_3.8.0-3ubuntu1~18.04.2_s390x.deb 5276ba335a354647da8644c892a49588 18981484 debug optional python3.8-dbg_3.8.0-3ubuntu1~18.04.2_s390x.deb f345ec76387d44771b9598ef8753fee0 509908 python optional python3.8-dev_3.8.0-3ubuntu1~18.04.2_s390x.deb a5597ac725bcd354976facaa103d2e84 1657792 python optional python3.8-minimal_3.8.0-3ubuntu1~18.04.2_s390x.deb 30f6767a0732701ecee629620d5ae000 5304 python optional python3.8-venv_3.8.0-3ubuntu1~18.04.2_s390x.deb 6f92be9ef6e6862abbb6e84eda6e1970 12820 python optional python3.8_3.8.0-3ubuntu1~18.04.2_s390x.buildinfo ba5b1070ed9317a6a2a79a8a555ec2af 354840 python optional python3.8_3.8.0-3ubuntu1~18.04.2_s390x.deb Original-Maintainer: Matthias Klose