Format: 1.8
Date: Tue, 20 Aug 2019 13:04:43 -0400
Source: python3.7
Binary: libpython3.7 libpython3.7-dbg libpython3.7-dev libpython3.7-minimal libpython3.7-stdlib python3.7 python3.7-dbg python3.7-dev python3.7-minimal python3.7-venv
Architecture: i386
Version: 3.7.3-2ubuntu0.1
Distribution: disco
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-038.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libpython3.7 - Shared Python runtime library (version 3.7)
 libpython3.7-dbg - Debug Build of the Python Interpreter (version 3.7)
 libpython3.7-dev - Header files and a static library for Python (v3.7)
 libpython3.7-minimal - Minimal subset of the Python language (version 3.7)
 libpython3.7-stdlib - Interactive high-level object-oriented language (standard library
 python3.7  - Interactive high-level object-oriented language (version 3.7)
 python3.7-dbg - Debug Build of the Python Interpreter (version 3.7)
 python3.7-dev - Header files and a static library for Python (v3.7)
 python3.7-minimal - Minimal subset of the Python language (version 3.7)
 python3.7-venv - Interactive high-level object-oriented language (pyvenv binary, v
Changes:
 python3.7 (3.7.3-2ubuntu0.1) disco-security; urgency=medium
 .
   * SECURITY UPDATE: HTTP header injection
     - debian/patches/CVE-2019-9740.patch: disallow control chars in http
       URLs in Lib/http/client.py, Lib/test/test_urllib.py,
       Lib/test/test_xmlrpc.py.
     - CVE-2019-9740
     - CVE-2019-9947
   * SECURITY UPDATE: urllib support the local_file: scheme
     - debian/patches/CVE-2019-9948.patch: disallow file reading in
       Lib/urllib/request.py, Lib/test/test_urllib.py.
     - CVE-2019-9948
   * SECURITY UPDATE: incomplete fix for CVE-2019-9636
     - debian/patches/CVE-2019-10160-1.patch: fix handling of
       pre-normalization characters in urlsplit() in
       Lib/test/test_urlparse.py, Lib/urllib/parse.py.
     - debian/patches/CVE-2019-10160-2.patch: correct fix to handle
       decomposition in usernames in Lib/test/test_urlparse.py,
       Lib/urllib/parse.py.
     - CVE-2019-10160
Checksums-Sha1:
 aa2874b0b9f73af5bf66587ecc4bfec38f3b9f0d 10528384 libpython3.7-dbg_3.7.3-2ubuntu0.1_i386.deb
 ae8c95c414d81ea299e5e8bed2f1d67a678092ce 47744936 libpython3.7-dev_3.7.3-2ubuntu0.1_i386.deb
 f9be47ab8c26ed2437515bcb754d4c6d3e3db5fd 546444 libpython3.7-minimal_3.7.3-2ubuntu0.1_i386.deb
 119cb69366069990259a3bbf0fd5b4a0d6d3887a 1750128 libpython3.7-stdlib_3.7.3-2ubuntu0.1_i386.deb
 efaf96775d26580b7a44e3e9f0b6eecca7397c79 1505560 libpython3.7_3.7.3-2ubuntu0.1_i386.deb
 7db19f67a5bd8e04eac04394525d8d537bd099d5 14593136 python3.7-dbg_3.7.3-2ubuntu0.1_i386.deb
 4fb9f84dd2e0cac1974a4e8c798bab0723683d3a 510480 python3.7-dev_3.7.3-2ubuntu0.1_i386.deb
 eec006ea1a9648aced87b8688cc214b26c1de62a 1699360 python3.7-minimal_3.7.3-2ubuntu0.1_i386.deb
 d94ee102bd485ee39ea8da1270c236d05c5db2fc 6192 python3.7-venv_3.7.3-2ubuntu0.1_i386.deb
 cadb644ad4a93029fef92a8201bd6ea8231b28ed 11774 python3.7_3.7.3-2ubuntu0.1_i386.buildinfo
 5c1e31de0bc5501f65580e1aa1be9bbe0235f092 283948 python3.7_3.7.3-2ubuntu0.1_i386.deb
Checksums-Sha256:
 978477a39d24fb47f44c8921f33defc46933d0f5a48684cf3f0f56e3e1ae1e0d 10528384 libpython3.7-dbg_3.7.3-2ubuntu0.1_i386.deb
 7d97bb7eea068ebb7569ade3065993f6f1fbde8aa09e3b9126408950ab1ce108 47744936 libpython3.7-dev_3.7.3-2ubuntu0.1_i386.deb
 cf94a8105bc4a23e1ba596e35b5e39d668520da623140d9ada18fa9dc6ddf709 546444 libpython3.7-minimal_3.7.3-2ubuntu0.1_i386.deb
 f5118c8ee8eb1c7028fc54c99003941aea6a4849b9094ed35183804dd6559d70 1750128 libpython3.7-stdlib_3.7.3-2ubuntu0.1_i386.deb
 cb64d56bd7c1936cbd649c1ba855cbb914c6b779a9d1de14425e452b98efdaff 1505560 libpython3.7_3.7.3-2ubuntu0.1_i386.deb
 3392583ed5d801627c67d99ffdae444b611daa1dc4db5bfe3436cd0abe1f16f6 14593136 python3.7-dbg_3.7.3-2ubuntu0.1_i386.deb
 e4001c2c82fc11b7a44b705608dffd07ded613202a528b6e7d635d8f6c994a52 510480 python3.7-dev_3.7.3-2ubuntu0.1_i386.deb
 9f1c24fc4973b5c4dc2bfcc2146ae4352a6e431211570180b04d278054b820a4 1699360 python3.7-minimal_3.7.3-2ubuntu0.1_i386.deb
 1248a13270a1fcd54efe815f970ba2a021a04af65856ba05a50bee90886d20ec 6192 python3.7-venv_3.7.3-2ubuntu0.1_i386.deb
 c15cc8081204a58ca163c48b0b9d93d0b165132ecb37c0944e0548b1bdc8c74f 11774 python3.7_3.7.3-2ubuntu0.1_i386.buildinfo
 412c8de66de483cf769deac8c0d961a570eb4e5f6e44c6c842bbbdac78b5b693 283948 python3.7_3.7.3-2ubuntu0.1_i386.deb
Files:
 f8d9e39c54f53a39164afb0be5797d25 10528384 debug optional libpython3.7-dbg_3.7.3-2ubuntu0.1_i386.deb
 28c476c77f13bef6d38a8306912ae8cc 47744936 libdevel optional libpython3.7-dev_3.7.3-2ubuntu0.1_i386.deb
 44c76054cfe4f7f9843ca6a7579d210d 546444 python optional libpython3.7-minimal_3.7.3-2ubuntu0.1_i386.deb
 915a5e30caec5d612b341be08cf0114f 1750128 python optional libpython3.7-stdlib_3.7.3-2ubuntu0.1_i386.deb
 aece85bc9aef38c40d76f0c492ab89e6 1505560 libs optional libpython3.7_3.7.3-2ubuntu0.1_i386.deb
 1103b34cb2442334d3f7df9783f559e5 14593136 debug optional python3.7-dbg_3.7.3-2ubuntu0.1_i386.deb
 9f5686c534f6a688811140d2413598d2 510480 python optional python3.7-dev_3.7.3-2ubuntu0.1_i386.deb
 44978ee1c332f11ee3cc8ea544656899 1699360 python optional python3.7-minimal_3.7.3-2ubuntu0.1_i386.deb
 85057387accebfe21d10a108de092016 6192 python optional python3.7-venv_3.7.3-2ubuntu0.1_i386.deb
 df2ec9fe611750eea79d205e99fa0b8c 11774 python optional python3.7_3.7.3-2ubuntu0.1_i386.buildinfo
 838b96474f1534bf24841065e55dd4aa 283948 python optional python3.7_3.7.3-2ubuntu0.1_i386.deb
Original-Maintainer: Matthias Klose <doko@debian.org>