[ubuntu/bionic-proposed] python2.7 2.7.17-1~18.04 (Accepted)

Matthias Klose doko at ubuntu.com
Thu Dec 5 21:22:44 UTC 2019 

python2.7 (2.7.17-1~18.04) bionic-proposed; urgency=medium

  * SRU: LP: #1855133.
  * Backport Python 2.7.17 to 18.04 LTS.
  * Don't run the test_ttk_guionly test, hangs on the buildds.

python2.7 (2.7.17-1) unstable; urgency=medium

  * Python 2.7.17 release.

python2.7 (2.7.17~rc1-1) unstable; urgency=medium

  * Python 2.7.17 release candidate 1.
    - CVE-2019-16056, don't parse domains containing @. Closes: #940901.
  * Bump standards version.

python2.7 (2.7.16-4) unstable; urgency=medium

  * Update to 20190904 from the 2.7 branch.
  * Refresh patches.
  * Drop build dependency on python:any. Addresses: #937569.
  * Annotate Build-Depends: xvfb and xauth with <!nocheck>. Closes: #928514.

python2.7 (2.7.16-3) unstable; urgency=medium

  * Update to 20190708 from the 2.7 branch.
  * Bump standards version.

python2.7 (2.7.16-2) unstable; urgency=high

  [ Matthias Klose ]
  * CVE-2019-9636. Fix issue #36216: Add check for characters in netloc that
    normalize to separators. Closes: #924073.
  * CVE-2019-9948. Fix issue #35907: Stop urllib exposing the local_file schema
    (file://).

  [ Dimitri John Ledkov ]
  * Bump Build-Depedency and Dependency of libssl-dev and libss1.1 to
    1.1.1 or higher. As TLS1.3 constants leak into ssl module, thus one
    shouldn't mix and match python2.7 & libssl1.1. LP: #1808476

python2.7 (2.7.16-1) unstable; urgency=medium

  * Python 2.7.16 release.
    - Now has a version without a trailing '+'. Closes: #914072.

python2.7 (2.7.16~rc1-1) unstable; urgency=medium

  * Python 2.7.16 release candidate 1.

python2.7 (2.7.15-9) unstable; urgency=medium

  * Update to 20190216 from the 2.7 branch.
    - Backport of TLS 1.3 related fixes from 3.7.
  * Drop the local TLS 1.3 backports.

python2.7 (2.7.15-8) unstable; urgency=medium

  * Fix typo in autopkg test.

python2.7 (2.7.15-7) unstable; urgency=medium

  * Expect the test_site test failing as in 3.7.

python2.7 (2.7.15-6) unstable; urgency=medium

  * Update to 20190201 from the 2.7 branch.
    - CVE-2013-1752: Limit imaplib.IMAP4_SSL.readline().
    - CVE-2018-14647: _elementtree.c doesn't call XML_SetHashSalt().
      Closes: #921039.
    - CVE-2019-5010: DsO vulnerability exists in the X509 certificate parser.
      Closes: #921040.
  * Bump standards version.
  * Update symbols file.

python2.7 (2.7.15-5) unstable; urgency=medium

  * Update to 20181127 from the 2.7 branch.
    - Fix issue #20744, running an external 'zip' in shutil.make_archive().
      CVE-2018-1000802. Closes: #909673.
  * Cherrypick in-progress backports to 2.7 branch from 3.6 branch to fix
    test_ssl assertions with openssl 1.1.1. Resolves autopkgtest failure
    of the 2.7 with openssl 1.1.1 (Dimitri John Ledkov).
  * Don't hard code location of netinet/in.h. Closes: #912422.
  * Update VCS attributes.

Date: Thu, 07 Nov 2019 11:07:09 +0100
Changed-By: Matthias Klose <doko at ubuntu.com>
Maintainer: Matthias Klose <doko at debian.org>
https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04
-------------- next part --------------
Format: 1.8
Date: Thu, 07 Nov 2019 11:07:09 +0100
Source: python2.7
Binary: python2.7 libpython2.7-stdlib python2.7-minimal libpython2.7-minimal libpython2.7 python2.7-examples python2.7-dev libpython2.7-dev libpython2.7-testsuite idle-python2.7 python2.7-doc python2.7-dbg libpython2.7-dbg
Architecture: source
Version: 2.7.17-1~18.04
Distribution: bionic-proposed
Urgency: high
Maintainer: Matthias Klose <doko at debian.org>
Changed-By: Matthias Klose <doko at ubuntu.com>
Description:
 idle-python2.7 - IDE for Python (v2.7) using Tkinter
 libpython2.7 - Shared Python runtime library (version 2.7)
 libpython2.7-dbg - Debug Build of the Python Interpreter (version 2.7)
 libpython2.7-dev - Header files and a static library for Python (v2.7)
 libpython2.7-minimal - Minimal subset of the Python language (version 2.7)
 libpython2.7-stdlib - Interactive high-level object-oriented language (standard library
 libpython2.7-testsuite - Testsuite for the Python standard library (v2.7)
 python2.7  - Interactive high-level object-oriented language (version 2.7)
 python2.7-dbg - Debug Build of the Python Interpreter (version 2.7)
 python2.7-dev - Header files and a static library for Python (v2.7)
 python2.7-doc - Documentation for the high-level object-oriented language Python
 python2.7-examples - Examples for the Python language (v2.7)
 python2.7-minimal - Minimal subset of the Python language (version 2.7)
Closes: 909673 912422 914072 921039 921040 924073 928514 940901
Launchpad-Bugs-Fixed: 1808476 1855133
Changes:
 python2.7 (2.7.17-1~18.04) bionic-proposed; urgency=medium
 .
   * SRU: LP: #1855133.
   * Backport Python 2.7.17 to 18.04 LTS.
   * Don't run the test_ttk_guionly test, hangs on the buildds.
 .
 python2.7 (2.7.17-1) unstable; urgency=medium
 .
   * Python 2.7.17 release.
 .
 python2.7 (2.7.17~rc1-1) unstable; urgency=medium
 .
   * Python 2.7.17 release candidate 1.
     - CVE-2019-16056, don't parse domains containing @. Closes: #940901.
   * Bump standards version.
 .
 python2.7 (2.7.16-4) unstable; urgency=medium
 .
   * Update to 20190904 from the 2.7 branch.
   * Refresh patches.
   * Drop build dependency on python:any. Addresses: #937569.
   * Annotate Build-Depends: xvfb and xauth with <!nocheck>. Closes: #928514.
 .
 python2.7 (2.7.16-3) unstable; urgency=medium
 .
   * Update to 20190708 from the 2.7 branch.
   * Bump standards version.
 .
 python2.7 (2.7.16-2) unstable; urgency=high
 .
   [ Matthias Klose ]
   * CVE-2019-9636. Fix issue #36216: Add check for characters in netloc that
     normalize to separators. Closes: #924073.
   * CVE-2019-9948. Fix issue #35907: Stop urllib exposing the local_file schema
     (file://).
 .
   [ Dimitri John Ledkov ]
   * Bump Build-Depedency and Dependency of libssl-dev and libss1.1 to
     1.1.1 or higher. As TLS1.3 constants leak into ssl module, thus one
     shouldn't mix and match python2.7 & libssl1.1. LP: #1808476
 .
 python2.7 (2.7.16-1) unstable; urgency=medium
 .
   * Python 2.7.16 release.
     - Now has a version without a trailing '+'. Closes: #914072.
 .
 python2.7 (2.7.16~rc1-1) unstable; urgency=medium
 .
   * Python 2.7.16 release candidate 1.
 .
 python2.7 (2.7.15-9) unstable; urgency=medium
 .
   * Update to 20190216 from the 2.7 branch.
     - Backport of TLS 1.3 related fixes from 3.7.
   * Drop the local TLS 1.3 backports.
 .
 python2.7 (2.7.15-8) unstable; urgency=medium
 .
   * Fix typo in autopkg test.
 .
 python2.7 (2.7.15-7) unstable; urgency=medium
 .
   * Expect the test_site test failing as in 3.7.
 .
 python2.7 (2.7.15-6) unstable; urgency=medium
 .
   * Update to 20190201 from the 2.7 branch.
     - CVE-2013-1752: Limit imaplib.IMAP4_SSL.readline().
     - CVE-2018-14647: _elementtree.c doesn't call XML_SetHashSalt().
       Closes: #921039.
     - CVE-2019-5010: DsO vulnerability exists in the X509 certificate parser.
       Closes: #921040.
   * Bump standards version.
   * Update symbols file.
 .
 python2.7 (2.7.15-5) unstable; urgency=medium
 .
   * Update to 20181127 from the 2.7 branch.
     - Fix issue #20744, running an external 'zip' in shutil.make_archive().
       CVE-2018-1000802. Closes: #909673.
   * Cherrypick in-progress backports to 2.7 branch from 3.6 branch to fix
     test_ssl assertions with openssl 1.1.1. Resolves autopkgtest failure
     of the 2.7 with openssl 1.1.1 (Dimitri John Ledkov).
   * Don't hard code location of netinet/in.h. Closes: #912422.
   * Update VCS attributes.
Checksums-Sha1:
 8a3a951e83e37c18f07189431bd53731db4129cb 3388 python2.7_2.7.17-1~18.04.dsc
 9d77ef0c70a78532d292a6c61ca7105e24cf30be 287074 python2.7_2.7.17-1~18.04.diff.gz
 c5d2f862eb85a1a5d89ba124fd6efcba4893e4bb 11409 python2.7_2.7.17-1~18.04_source.buildinfo
Checksums-Sha256:
 6d68c4706e44e567668345435b521190cc8b8e8ee78a38078d16223c19ddb15d 3388 python2.7_2.7.17-1~18.04.dsc
 d2088da2c791fbdf4e209593f82cc05f08711efa2b9050abc62f204db966e16e 287074 python2.7_2.7.17-1~18.04.diff.gz
 4ce8365fa2e54148e97df4baaeeea9cf86376d04497d5baeb43fa20f37c6b805 11409 python2.7_2.7.17-1~18.04_source.buildinfo
Files:
 db345ff0f7f199bebd02bfc308bd6c94 3388 python optional python2.7_2.7.17-1~18.04.dsc
 95d6e67df2a5f1941a64727bd296117e 287074 python optional python2.7_2.7.17-1~18.04.diff.gz
 48434d890e4dbf137b51b3e8f4e93376 11409 python optional python2.7_2.7.17-1~18.04_source.buildinfo

More information about the Bionic-changes mailing list