[ubuntu/lucid] python2.5 2.5.4-1ubuntu8 (Accepted)

[Jamie Strandboge]

python2.5 (2.5.4-1ubuntu8) lucid; urgency=low

  * SECURITY UPDATE: fix DoS via malformed XML
    - debian/patches/CVE-2009-3720.dpatch: update Modules/expat/xmltok_impl.c
      to not access beyond end of input string
    - CVE-2009-3720
  * SECURITY UPDATE: fix DoS via malformed UTF-8 sequences
    - debian/patches/CVE-2009-3560.dpatch: update Modules/expat/xmlparse.c to
      properly recognize the end of a token
    - CVE-2009-3560

Date: Wed, 20 Jan 2010 15:29:00 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/python2.5/2.5.4-1ubuntu8
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 20 Jan 2010 15:29:00 -0600
Source: python2.5
Binary: python2.5 python2.5-minimal python2.5-examples python2.5-dev idle-python2.5 python2.5-doc python2.5-dbg
Architecture: source
Version: 2.5.4-1ubuntu8
Distribution: lucid
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 idle-python2.5 - An IDE for Python (v2.5) using Tkinter
 python2.5  - An interactive high-level object-oriented language (version 2.5)
 python2.5-dbg - Debug Build of the Python Interpreter (version 2.5)
 python2.5-dev - Header files and a static library for Python (v2.5)
 python2.5-doc - Documentation for the high-level object-oriented language Python 
 python2.5-examples - Examples for the Python language (v2.5)
 python2.5-minimal - A minimal subset of the Python language (version 2.5)
Changes: 
 python2.5 (2.5.4-1ubuntu8) lucid; urgency=low
 .
   * SECURITY UPDATE: fix DoS via malformed XML
     - debian/patches/CVE-2009-3720.dpatch: update Modules/expat/xmltok_impl.c
       to not access beyond end of input string
     - CVE-2009-3720
   * SECURITY UPDATE: fix DoS via malformed UTF-8 sequences
     - debian/patches/CVE-2009-3560.dpatch: update Modules/expat/xmlparse.c to
       properly recognize the end of a token
     - CVE-2009-3560
Checksums-Sha1: 
 6316fca05509afc698f44e9fddbac9f9e0c5b5ab 1953 python2.5_2.5.4-1ubuntu8.dsc
 c776e543318ba151585ad03e4664d46d9c3fdac5 2999411 python2.5_2.5.4-1ubuntu8.diff.gz
Checksums-Sha256: 
 9b90b360f82594cb872467eb94cac7c3f68f2b95f35f02c88e37c627b5ef5c52 1953 python2.5_2.5.4-1ubuntu8.dsc
 e531631bf5bdc701871ea50f7f0a5e98df75d70e13969539b64180e8e04ec09d 2999411 python2.5_2.5.4-1ubuntu8.diff.gz
Files: 
 b891c4b888b0d4998be27e42d640aa42 1953 python optional python2.5_2.5.4-1ubuntu8.dsc
 af2a74d413d799bf8352983babe214cf 2999411 python optional python2.5_2.5.4-1ubuntu8.diff.gz
Original-Maintainer: Matthias Klose <doko at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAktYelIACgkQW0JvuRdL8BoAmACgg+XLizAjrwZV01QwqBrTKxix
lZgAoJfeYRq6ls/s84XJnuXVxPHP1NfK
=Ukpg
-----END PGP SIGNATURE-----