Format: 1.8 Date: Mon, 25 Mar 2024 10:42:49 +0000 Source: python3.8 Architecture: source Version: 3.8.10-0ubuntu1~20.04.10 Distribution: focal-security Urgency: medium Maintainer: Ubuntu Core Developers Changed-By: Allen Huang Changes: python3.8 (3.8.10-0ubuntu1~20.04.10) focal-security; urgency=medium . * SECURITY UPDATE: incorrect permission assignment - debian/patches/CVE-2023-6597.patch: fix symlink bug in cleanup. - CVE-2023-6597 * SECURITY UPDATE: zipbomb DoS attack - debian/patches/CVE-2024-0450.patch: raise BadZipFile when trying to read an entry that overlaps with other entry or central directory. - CVE-2024-0450 Checksums-Sha1: e87f542298442c29a53c9bf470357b1379dd4717 3545 python3.8_3.8.10-0ubuntu1~20.04.10.dsc f140dbced935ffdd6df27e8bb04d3db22e38cd69 229332 python3.8_3.8.10-0ubuntu1~20.04.10.debian.tar.xz 81e62fa6e307daa1d8d5f55857ec3152ad795022 10923 python3.8_3.8.10-0ubuntu1~20.04.10_source.buildinfo Checksums-Sha256: 9afd577b303f18da69c54b272491411e2c1942ba2ffe768bcf676851f6e794e4 3545 python3.8_3.8.10-0ubuntu1~20.04.10.dsc 4ebe09c854dba5dae700136d4e683005ad2fd4fc37b21d0c8fde137dbff89457 229332 python3.8_3.8.10-0ubuntu1~20.04.10.debian.tar.xz 18b8fbe7b8356565fdda6e2384e12c3c8ec03565fa3918f0dc7a9884e8b7dee3 10923 python3.8_3.8.10-0ubuntu1~20.04.10_source.buildinfo Files: a05c63e60411095c54485ca453064e65 3545 python optional python3.8_3.8.10-0ubuntu1~20.04.10.dsc ce2412c4a7e82d34db4c88c87b5dd3d1 229332 python optional python3.8_3.8.10-0ubuntu1~20.04.10.debian.tar.xz c0ef580da096ac088aa44f97565e9c1a 10923 python optional python3.8_3.8.10-0ubuntu1~20.04.10_source.buildinfo Original-Maintainer: Matthias Klose