Format: 1.8 Date: Tue, 20 Aug 2019 13:04:43 -0400 Source: python3.7 Binary: libpython3.7 libpython3.7-dbg libpython3.7-dev libpython3.7-minimal libpython3.7-stdlib python3.7 python3.7-dbg python3.7-dev python3.7-minimal python3.7-venv Architecture: arm64 Version: 3.7.3-2ubuntu0.1 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libpython3.7 - Shared Python runtime library (version 3.7) libpython3.7-dbg - Debug Build of the Python Interpreter (version 3.7) libpython3.7-dev - Header files and a static library for Python (v3.7) libpython3.7-minimal - Minimal subset of the Python language (version 3.7) libpython3.7-stdlib - Interactive high-level object-oriented language (standard library python3.7 - Interactive high-level object-oriented language (version 3.7) python3.7-dbg - Debug Build of the Python Interpreter (version 3.7) python3.7-dev - Header files and a static library for Python (v3.7) python3.7-minimal - Minimal subset of the Python language (version 3.7) python3.7-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.7 (3.7.3-2ubuntu0.1) disco-security; urgency=medium . * SECURITY UPDATE: HTTP header injection - debian/patches/CVE-2019-9740.patch: disallow control chars in http URLs in Lib/http/client.py, Lib/test/test_urllib.py, Lib/test/test_xmlrpc.py. - CVE-2019-9740 - CVE-2019-9947 * SECURITY UPDATE: urllib support the local_file: scheme - debian/patches/CVE-2019-9948.patch: disallow file reading in Lib/urllib/request.py, Lib/test/test_urllib.py. - CVE-2019-9948 * SECURITY UPDATE: incomplete fix for CVE-2019-9636 - debian/patches/CVE-2019-10160-1.patch: fix handling of pre-normalization characters in urlsplit() in Lib/test/test_urlparse.py, Lib/urllib/parse.py. - debian/patches/CVE-2019-10160-2.patch: correct fix to handle decomposition in usernames in Lib/test/test_urlparse.py, Lib/urllib/parse.py. - CVE-2019-10160 Checksums-Sha1: 87d627936e5635bc97e70380103cd38dd9274cde 11375892 libpython3.7-dbg_3.7.3-2ubuntu0.1_arm64.deb c5cd947d6b3343e37bc1b5cf7751100dfe70431f 2379564 libpython3.7-dev_3.7.3-2ubuntu0.1_arm64.deb ba8bd8cde6836ea099ca4bc7b37e4f5d3c632fb9 543728 libpython3.7-minimal_3.7.3-2ubuntu0.1_arm64.deb a86682d11d429e7a253cc3d6aaf64306d63810e8 1641264 libpython3.7-stdlib_3.7.3-2ubuntu0.1_arm64.deb 654b3c380eeaf093f0f920c55ed6e3fe0594a676 1371124 libpython3.7_3.7.3-2ubuntu0.1_arm64.deb 215e76fe71c993ff307f6e42d1c1e6690b2fdd21 15554060 python3.7-dbg_3.7.3-2ubuntu0.1_arm64.deb 26fd5ad24b761679b379db533778b3904efa5f15 511040 python3.7-dev_3.7.3-2ubuntu0.1_arm64.deb 263859ec3035feadb0d1062db6ec9fd44ce006cd 1359104 python3.7-minimal_3.7.3-2ubuntu0.1_arm64.deb 3b8d1bfb92d65557a66578175ef63ea48bd6d293 6192 python3.7-venv_3.7.3-2ubuntu0.1_arm64.deb 18adbb56a33845dd5ca6d68b493afee3949c09db 11784 python3.7_3.7.3-2ubuntu0.1_arm64.buildinfo b31229738af7288c801b28d434151be015edf611 283948 python3.7_3.7.3-2ubuntu0.1_arm64.deb Checksums-Sha256: 13c5876b24d1e8793499b2047b5d9e959c08e2bb6b9f21c75b3790c7d14c7521 11375892 libpython3.7-dbg_3.7.3-2ubuntu0.1_arm64.deb b2c42d5e0f0bba5db4c1ec60b2dc619e829975c2c2f4b1927a02339bc7484099 2379564 libpython3.7-dev_3.7.3-2ubuntu0.1_arm64.deb c9ebd1b80595345184caa2634e107bda3dd8735cd9f417b14c5f773477058c8d 543728 libpython3.7-minimal_3.7.3-2ubuntu0.1_arm64.deb f862e36169a3daaca2a2d3d4f66c386aaca548c1a25aed9c2d54f35c42761472 1641264 libpython3.7-stdlib_3.7.3-2ubuntu0.1_arm64.deb 0ef737b001b27e66e8c75c87e3c11664a28441d0613758d361e843bc7aafd445 1371124 libpython3.7_3.7.3-2ubuntu0.1_arm64.deb b9524ebb9e6720d8803e87ba8c4e28b3255bccbb8609f816a02468a4664d5c03 15554060 python3.7-dbg_3.7.3-2ubuntu0.1_arm64.deb 6c0a34600f9e7ae5ed7338af22bc3b14aaa0f266c55b9ba0fe4ac683c80f4cb6 511040 python3.7-dev_3.7.3-2ubuntu0.1_arm64.deb 73133e35996180fd14bca92d690541f0f902f3f58eb1cf07a76ccb928ef61292 1359104 python3.7-minimal_3.7.3-2ubuntu0.1_arm64.deb 68301b48915d00e2fba80d79ac4db7da0aebbdfee31065ce512fba2529948d77 6192 python3.7-venv_3.7.3-2ubuntu0.1_arm64.deb 6176fb7cd7489572e7133248b9b53a2b1e8a1ed7157db5526db6733b60e114be 11784 python3.7_3.7.3-2ubuntu0.1_arm64.buildinfo 7b36199ddb4a37073ff0c07a9ea17775f519cf743540a7abd62e9156be445904 283948 python3.7_3.7.3-2ubuntu0.1_arm64.deb Files: ddd1051653642e2220cd7bb1be1059f0 11375892 debug optional libpython3.7-dbg_3.7.3-2ubuntu0.1_arm64.deb 7878793b004c51c5bb905f92542b1167 2379564 libdevel optional libpython3.7-dev_3.7.3-2ubuntu0.1_arm64.deb 2ea2d9ea1e13578c82bf6257071150ce 543728 python optional libpython3.7-minimal_3.7.3-2ubuntu0.1_arm64.deb 97efa65ae3311805d9edec333a246b90 1641264 python optional libpython3.7-stdlib_3.7.3-2ubuntu0.1_arm64.deb 3142c82bb7522ce519a7c21aa37c49c6 1371124 libs optional libpython3.7_3.7.3-2ubuntu0.1_arm64.deb 7ebeaba0e173cf6db62b2ab11901ab30 15554060 debug optional python3.7-dbg_3.7.3-2ubuntu0.1_arm64.deb 003fcf816e69520fc8496ec70f66b9af 511040 python optional python3.7-dev_3.7.3-2ubuntu0.1_arm64.deb 582a2619d7d315e02fdbf03c1dde7e59 1359104 python optional python3.7-minimal_3.7.3-2ubuntu0.1_arm64.deb 802d3d8244591057bc3758895e2b86a7 6192 python optional python3.7-venv_3.7.3-2ubuntu0.1_arm64.deb 83995b5fae5e23686f337b489a3a774e 11784 python optional python3.7_3.7.3-2ubuntu0.1_arm64.buildinfo fbfed4b35f1d5e1d3f16d6455f00cc57 283948 python optional python3.7_3.7.3-2ubuntu0.1_arm64.deb Original-Maintainer: Matthias Klose