python3.7 3.7.3-2ubuntu0.1 source package in Ubuntu
Changelog
python3.7 (3.7.3-2ubuntu0.1) disco-security; urgency=medium
* SECURITY UPDATE: HTTP header injection
- debian/patches/CVE-2019-9740.patch: disallow control chars in http
URLs in Lib/http/client.py, Lib/test/test_urllib.py,
Lib/test/test_xmlrpc.py.
- CVE-2019-9740
- CVE-2019-9947
* SECURITY UPDATE: urllib support the local_file: scheme
- debian/patches/CVE-2019-9948.patch: disallow file reading in
Lib/urllib/request.py, Lib/test/test_urllib.py.
- CVE-2019-9948
* SECURITY UPDATE: incomplete fix for CVE-2019-9636
- debian/patches/CVE-2019-10160-1.patch: fix handling of
pre-normalization characters in urlsplit() in
Lib/test/test_urlparse.py, Lib/urllib/parse.py.
- debian/patches/CVE-2019-10160-2.patch: correct fix to handle
decomposition in usernames in Lib/test/test_urlparse.py,
Lib/urllib/parse.py.
- CVE-2019-10160
-- Marc Deslauriers <email address hidden> Tue, 20 Aug 2019 13:04:43 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Disco
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- python
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| python3.7_3.7.3.orig.tar.xz | 16.3 MiB | da60b54064d4cfcd9c26576f6df2690e62085123826cff2e667e72a91952d318 |
| python3.7_3.7.3-2ubuntu0.1.debian.tar.xz | 209.6 KiB | a259da650989e391a0047b47ae7536739f4bd3e811f62f0ff6206db55dfb1645 |
| python3.7_3.7.3-2ubuntu0.1.dsc | 3.4 KiB | 4c0457d19b32a4e68c2f91277db9c592aeaee1b5329a7703e68e868717bfcbd6 |
Available diffs
Binary packages built by this source
- idle-python3.7: No summary available for idle-python3.7 in ubuntu disco.
No description available for idle-python3.7 in ubuntu disco.
- libpython3.7: No summary available for libpython3.7 in ubuntu disco.
No description available for libpython3.7 in ubuntu disco.
- libpython3.7-dbg: No summary available for libpython3.7-dbg in ubuntu disco.
No description available for libpython3.7-dbg in ubuntu disco.
- libpython3.7-dev: No summary available for libpython3.7-dev in ubuntu disco.
No description available for libpython3.7-dev in ubuntu disco.
- libpython3.7-minimal: No summary available for libpython3.7-minimal in ubuntu disco.
No description available for libpython3.
7-minimal in ubuntu disco.
- libpython3.7-stdlib: No summary available for libpython3.7-stdlib in ubuntu disco.
No description available for libpython3.7-stdlib in ubuntu disco.
- libpython3.7-testsuite: No summary available for libpython3.7-testsuite in ubuntu disco.
No description available for libpython3.
7-testsuite in ubuntu disco.
- python3.7: No summary available for python3.7 in ubuntu disco.
No description available for python3.7 in ubuntu disco.
- python3.7-dbg: No summary available for python3.7-dbg in ubuntu disco.
No description available for python3.7-dbg in ubuntu disco.
- python3.7-dev: No summary available for python3.7-dev in ubuntu disco.
No description available for python3.7-dev in ubuntu disco.
- python3.7-doc: No summary available for python3.7-doc in ubuntu disco.
No description available for python3.7-doc in ubuntu disco.
- python3.7-examples: No summary available for python3.7-examples in ubuntu disco.
No description available for python3.7-examples in ubuntu disco.
- python3.7-minimal: No summary available for python3.7-minimal in ubuntu disco.
No description available for python3.7-minimal in ubuntu disco.
- python3.7-venv: No summary available for python3.7-venv in ubuntu disco.
No description available for python3.7-venv in ubuntu disco.
