lp://staging/ubuntu/natty-security/python2.7

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

30. By Jamie Strandboge on 2012-09-27

* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURITY UPDATE: update urllib and urllib2 for invalid redirections
  - debian/patches/CVE-2011-1521.diff: only process Location headers for
    http, https, and ftp
  - http://bugs.python.org/issue11662
  - CVE-2011-1521
* SECURITY UPDATE: fix XSS in SimpleHTTPServer
  - debian/patches/CVE-2011-4940.diff: add a charset parameter to the
    Content-type
  - CVE-2011-4940
* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944

29. By Matthias Klose on 2011-04-11

Force linking the curses module against libncursesw.

28. By Steve Langasek on 2011-03-23

debian/patches/deb-setup.diff: DEB_GNU_TYPE was never being set, so
the expected multiarch path support wasn't working. Consolidate to
a single call to dpkg-architecture -qDEB_HOST_MULTIARCH in setup.py.
LP: #738213.

27. By Matthias Klose on 2011-02-24

* Update to 20110224, taken from the 2.7 branch.
* Update patches.
* Re-enable profile guided build.

26. By Matthias Klose on 2010-12-24

Do not run test_multiprocessing when running the testsuite.
Fails on armel and powerpc on some buildds.

25. By Matthias Klose on 2010-12-22

* Update to 20101222, taken from the 2.7 branch.
* Re-enable the distutils-sysconfig.diff patch, apparently
  lost when updating the patches for 2.7.
* Disable the profiled builds on all architectures.

24. By Matthias Klose on 2010-12-14

python2.7-minimal: Really remove break on python-minimal (<< 2.7.1~).

23. By Matthias Klose on 2010-12-14

python2.7-minimal: Remove break on python-minimal (<< 2.7.1~).

22. By Matthias Klose on 2010-12-13

python2.7-minimal: Add break on python-minimal (<< 2.7.1~).
LP: #689615.

21. By Matthias Klose on 2010-12-10

Raise the package priorities, now the default version.