Format: 1.8 Date: Thu, 09 Dec 2021 12:53:27 -0500 Source: python3.8 Binary: python3.8 python3.8-venv libpython3.8-stdlib python3.8-minimal libpython3.8-minimal libpython3.8 python3.8-examples python3.8-dev libpython3.8-dev libpython3.8-testsuite idle-python3.8 python3.8-doc python3.8-dbg libpython3.8-dbg Architecture: armhf Version: 3.8.0-3ubuntu1~18.04.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Ian Constantin Description: idle-python3.8 - IDE for Python (v3.8) using Tkinter libpython3.8 - Shared Python runtime library (version 3.8) libpython3.8-dbg - Debug Build of the Python Interpreter (version 3.8) libpython3.8-dev - Header files and a static library for Python (v3.8) libpython3.8-minimal - Minimal subset of the Python language (version 3.8) libpython3.8-stdlib - Interactive high-level object-oriented language (standard library libpython3.8-testsuite - Testsuite for the Python standard library (v3.8) python3.8 - Interactive high-level object-oriented language (version 3.8) python3.8-dbg - Debug Build of the Python Interpreter (version 3.8) python3.8-dev - Header files and a static library for Python (v3.8) python3.8-doc - Documentation for the high-level object-oriented language Python python3.8-examples - Examples for the Python language (v3.8) python3.8-minimal - Minimal subset of the Python language (version 3.8) python3.8-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.8 (3.8.0-3ubuntu1~18.04.2) bionic-security; urgency=medium . * SECURITY UPDATE: Regular Expression Denial of Service - debian/patches/CVE-2020-8492.patch: updates a regular expression in the urllib.request.AbsatrctBasicAuthHandler class which allows for catastrophic backtracking and could result in a Denial of Service condition. - CVE-2020-8492 * SECURITY UPDATE: Regular Expression Denial of Service - debian/patches/CVE-2021-3733.patch: updates a regular expression in the urllib.request.AbstractBasicAuthHandler class which has a quadratic worst-case time complexity and could be abused by a malicious HTTP server to cause a Denial of Service condition for a client. - CVE-2021-3733 * SECURITY UPDATE: Denial of Service - debian/patches/CVE-2021-3737.patch: addresses the potential for the urllib http client to enter into an infinite loop and hang on a 100 Continue response from a malicious server. - debian/patches/CVE-2021-3737_test-fix.patch: improves the regression test in Lib/test/test_httplib.py - CVE-2021-3737 Checksums-Sha1: e0f3c35fd939b9d49b8e20b2b1f7a6cab242ff25 12481428 libpython3.8-dbg_3.8.0-3ubuntu1~18.04.2_armhf.deb 86c3fdaefcd093375ad1851b969345f897e574db 53038164 libpython3.8-dev_3.8.0-3ubuntu1~18.04.2_armhf.deb 47eb9b3b0b19e264d9ef00d0d77e281dac23f558 696976 libpython3.8-minimal_3.8.0-3ubuntu1~18.04.2_armhf.deb fa8c0280e6c78cf489857f1f1a760df93bf330a8 1600188 libpython3.8-stdlib_3.8.0-3ubuntu1~18.04.2_armhf.deb a508baf99e3bf81e44330dd5abf9e44af705cf2a 1397184 libpython3.8_3.8.0-3ubuntu1~18.04.2_armhf.deb 648bbccad1be065bf68c7a8786f16a1bac45e3e5 17835924 python3.8-dbg_3.8.0-3ubuntu1~18.04.2_armhf.deb 7313956fc7993a88fa9283ebe28439d2da8bd3e2 510668 python3.8-dev_3.8.0-3ubuntu1~18.04.2_armhf.deb dbd884d042f9b088728cb8cd574b47158754224d 1509476 python3.8-minimal_3.8.0-3ubuntu1~18.04.2_armhf.deb 50f9f56a9c5c38b24989789bd90c7fc4afa4f13c 5304 python3.8-venv_3.8.0-3ubuntu1~18.04.2_armhf.deb 15fb00efea5bdb61cb52516d10f701bb58b823cf 12868 python3.8_3.8.0-3ubuntu1~18.04.2_armhf.buildinfo e6d325fc82e60926e563dc0478a9c9024ed6a903 354840 python3.8_3.8.0-3ubuntu1~18.04.2_armhf.deb Checksums-Sha256: e7727d7d6811b00782d0dd9607554d171657129913de89cdf2b65c9a90b1bc88 12481428 libpython3.8-dbg_3.8.0-3ubuntu1~18.04.2_armhf.deb b871e927f78874dffa1c12e6726fde0b4221ccc24dd3118dfdd7135194a04396 53038164 libpython3.8-dev_3.8.0-3ubuntu1~18.04.2_armhf.deb 9449b08619f39770e155377a72639adcc0be2eba367b808259a5ea9482191275 696976 libpython3.8-minimal_3.8.0-3ubuntu1~18.04.2_armhf.deb d9ae76b54114be16311f74630ab8ac30fc1e205bfb88007e721c16cb30b13ca6 1600188 libpython3.8-stdlib_3.8.0-3ubuntu1~18.04.2_armhf.deb 315a7063216fd0f7c6cad1c05fda9c512866a09e859c55c77e979a15adddcdac 1397184 libpython3.8_3.8.0-3ubuntu1~18.04.2_armhf.deb 60425c49d4b28eb5eab356f82f5962383ae193e30b167629eb8dc21cdde34296 17835924 python3.8-dbg_3.8.0-3ubuntu1~18.04.2_armhf.deb 37f5c362cba7394ec71520107dbc3c46035d88e8cfdce0ee0e481d38fe5d89c7 510668 python3.8-dev_3.8.0-3ubuntu1~18.04.2_armhf.deb 5f280c39901c38eabb9ee1656a7a30aeab1951c4733ded20f7e1ae3ea3807428 1509476 python3.8-minimal_3.8.0-3ubuntu1~18.04.2_armhf.deb 1addc01fc0228c2d1a3f61efb3dc64d0f43bcbf9700cee0fceb70f3a28c75155 5304 python3.8-venv_3.8.0-3ubuntu1~18.04.2_armhf.deb b3b0c5ba3250aa8703cb42f65aad1f00971e0494b3dbc9aea8c3629bb786da82 12868 python3.8_3.8.0-3ubuntu1~18.04.2_armhf.buildinfo 49c257b63a406f2bab68046faf2bd7bc95777441b07952c1371d24a385d3a4e3 354840 python3.8_3.8.0-3ubuntu1~18.04.2_armhf.deb Files: 6ba6b4e906e89eb6de1021195aa83393 12481428 debug optional libpython3.8-dbg_3.8.0-3ubuntu1~18.04.2_armhf.deb b5b6c52f3d5470125c60c99c7d195cd3 53038164 libdevel optional libpython3.8-dev_3.8.0-3ubuntu1~18.04.2_armhf.deb 5e35d2b6226e0eefb941ed0cffb4ad37 696976 python optional libpython3.8-minimal_3.8.0-3ubuntu1~18.04.2_armhf.deb a2ad32b9212bc87fa64dfc409a24a229 1600188 python optional libpython3.8-stdlib_3.8.0-3ubuntu1~18.04.2_armhf.deb ab9219c970d5fce21eec98ca5c54a9c6 1397184 libs optional libpython3.8_3.8.0-3ubuntu1~18.04.2_armhf.deb d25e1f1e1a0e0e66c402c2f9d1904655 17835924 debug optional python3.8-dbg_3.8.0-3ubuntu1~18.04.2_armhf.deb 4e36a468f5a596d2025d6951ad55dec5 510668 python optional python3.8-dev_3.8.0-3ubuntu1~18.04.2_armhf.deb 4a293aa5a8768419659ad1653f405169 1509476 python optional python3.8-minimal_3.8.0-3ubuntu1~18.04.2_armhf.deb f1ec5b41cedf41f935fe2df2e20b2685 5304 python optional python3.8-venv_3.8.0-3ubuntu1~18.04.2_armhf.deb d1b60403f8e7bf118e263b26994708f4 12868 python optional python3.8_3.8.0-3ubuntu1~18.04.2_armhf.buildinfo ba8b67cb5936686caddc8fcff117aa1e 354840 python optional python3.8_3.8.0-3ubuntu1~18.04.2_armhf.deb Original-Maintainer: Matthias Klose