[ubuntu/trusty-security] python3.4 3.4.0-2ubuntu1.1 (Accepted)

[Marc Deslauriers]

python3.4 (3.4.0-2ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
    HTTP bodies
    - debian/patches/CVE-2013-1753.patch: add default limit in
      Lib/xmlrpc/client.py, added test to Lib/test/test_xmlrpc.py.
    - CVE-2013-1753
  * SECURITY UPDATE: arbitrary memory read via idx argument
    - debian/patches/CVE-2014-4616.patch: reject negative idx values in
      Modules/_json.c, added test to Lib/test/test_json/test_decode.py.
    - CVE-2014-4616
  * SECURITY UPDATE: code execution or file disclosure via CGIHTTPServer
    - debian/patches/CVE-2014-4650.patch: url unquote path in
      Lib/http/server.py, added test to Lib/test/test_httpservers.py.
    - CVE-2014-4650
  * debian/patches/fix_ssl_test_dh.patch: replace 512 bit dh key with a
    2014 bit one to fix test failure with OpenSSL security update.

Date: 2015-06-19 14:15:12.482382+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/python3.4/3.4.0-2ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.