View Git repositories
Name Status Last Modified Last Commit
lp:ubuntu/wily/python2.7 1 Development 2015-10-14 17:08:43 UTC
131. Remove /etc/python2.7/cert-verificati...

Author: Matthias Klose
Revision Date: 2015-10-14 18:09:02 UTC

Remove /etc/python2.7/cert-verification.conf, to be introduced in a
Python 2.7 SRU for 14.04 LTS.

lp:ubuntu/wily-proposed/python2.7 1 Development 2015-10-14 17:08:43 UTC
131. Remove /etc/python2.7/cert-verificati...

Author: Matthias Klose
Revision Date: 2015-10-14 18:09:02 UTC

Remove /etc/python2.7/cert-verification.conf, to be introduced in a
Python 2.7 SRU for 14.04 LTS.

lp:ubuntu/utopic-updates/python2.7 2 Mature 2015-06-25 13:23:49 UTC
120. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2015-06-18 09:25:31 UTC

* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* debian/patches/fix_ssl_test_dh.patch: replace 512 bit dh key with a
  2014 bit one to fix test failure with OpenSSL security update.

lp:ubuntu/trusty-updates/python2.7 2 Mature 2015-06-25 13:23:43 UTC
106. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2015-06-22 10:51:39 UTC

* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-httplib-2.patch: limit amount of headers
    in Lib/httplib.py, added test to Lib/test/test_httplib.py.
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* SECURITY UPDATE: arbitrary memory read via idx argument
  - debian/patches/CVE-2014-4616.patch: reject negative idx values in
    Modules/_json.c, added test to Lib/json/tests/test_decode.py.
  - CVE-2014-4616
* SECURITY UPDATE: code execution or file disclosure via CGIHTTPServer
  - debian/patches/CVE-2014-4650.patch: url unquote path in
    Lib/CGIHTTPServer.py, added test to Lib/test/test_httpservers.py.
  - CVE-2014-4650
* SECURITY UPDATE: information disclosure via buffer function
  - debian/patches/CVE-2014-7185.patch: avoid overflow in
    Objects/bufferobject.c, added test to Lib/test/test_buffer.py.
  - CVE-2014-7185

lp:ubuntu/utopic-security/python2.7 2 Mature 2015-06-25 12:28:14 UTC
120. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2015-06-18 09:25:31 UTC

* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* debian/patches/fix_ssl_test_dh.patch: replace 512 bit dh key with a
  2014 bit one to fix test failure with OpenSSL security update.

lp:ubuntu/trusty-security/python2.7 2 Mature 2015-06-25 12:28:11 UTC
106. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2015-06-22 10:51:39 UTC

* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-httplib-2.patch: limit amount of headers
    in Lib/httplib.py, added test to Lib/test/test_httplib.py.
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* SECURITY UPDATE: arbitrary memory read via idx argument
  - debian/patches/CVE-2014-4616.patch: reject negative idx values in
    Modules/_json.c, added test to Lib/json/tests/test_decode.py.
  - CVE-2014-4616
* SECURITY UPDATE: code execution or file disclosure via CGIHTTPServer
  - debian/patches/CVE-2014-4650.patch: url unquote path in
    Lib/CGIHTTPServer.py, added test to Lib/test/test_httpservers.py.
  - CVE-2014-4650
* SECURITY UPDATE: information disclosure via buffer function
  - debian/patches/CVE-2014-7185.patch: avoid overflow in
    Objects/bufferobject.c, added test to Lib/test/test_buffer.py.
  - CVE-2014-7185

lp:ubuntu/precise-security/python2.7 2 Mature 2015-06-22 10:55:41 UTC
60. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2015-06-22 10:55:41 UTC

* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-ftplib.patch: limit amount of data read
    in Lib/ftplib.py, added test to Lib/test/test_ftplib.py.
  - debian/patches/CVE-2013-1752-httplib-1.patch: limit long lines in
    Lib/httplib.py.
  - debian/patches/CVE-2013-1752-httplib-2.patch: limit amount of headers
    in Lib/httplib.py, added test to Lib/test/test_httplib.py.
  - debian/patches/CVE-2013-1752-imaplib-1.patch: limit line length in
    Lib/imaplib.py, added test to Lib/test/test_imaplib.py.
  - debian/patches/CVE-2013-1752-imaplib-2.patch: disable broken test in
    Lib/test/test_imaplib.py.
  - debian/patches/CVE-2013-1752-nntplib.patch: limit line length in
    Lib/nntplib.py, added test to Lib/test/test_nntplib.py.
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* SECURITY UPDATE: arbitrary memory read via idx argument
  - debian/patches/CVE-2014-4616.patch: reject negative idx values in
    Modules/_json.c, added test to Lib/json/tests/test_decode.py.
  - CVE-2014-4616
* SECURITY UPDATE: code execution or file disclosure via CGIHTTPServer
  - debian/patches/CVE-2014-4650.patch: url unquote path in
    Lib/CGIHTTPServer.py, added test to Lib/test/test_httpservers.py.
  - CVE-2014-4650
* SECURITY UPDATE: information disclosure via buffer function
  - debian/patches/CVE-2014-7185.patch: avoid overflow in
    Objects/bufferobject.c, added test to Lib/test/test_buffer.py.
  - CVE-2014-7185

lp:ubuntu/precise-updates/python2.7 2 Mature 2015-06-22 10:55:41 UTC
60. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2015-06-22 10:55:41 UTC

* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-ftplib.patch: limit amount of data read
    in Lib/ftplib.py, added test to Lib/test/test_ftplib.py.
  - debian/patches/CVE-2013-1752-httplib-1.patch: limit long lines in
    Lib/httplib.py.
  - debian/patches/CVE-2013-1752-httplib-2.patch: limit amount of headers
    in Lib/httplib.py, added test to Lib/test/test_httplib.py.
  - debian/patches/CVE-2013-1752-imaplib-1.patch: limit line length in
    Lib/imaplib.py, added test to Lib/test/test_imaplib.py.
  - debian/patches/CVE-2013-1752-imaplib-2.patch: disable broken test in
    Lib/test/test_imaplib.py.
  - debian/patches/CVE-2013-1752-nntplib.patch: limit line length in
    Lib/nntplib.py, added test to Lib/test/test_nntplib.py.
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* SECURITY UPDATE: arbitrary memory read via idx argument
  - debian/patches/CVE-2014-4616.patch: reject negative idx values in
    Modules/_json.c, added test to Lib/json/tests/test_decode.py.
  - CVE-2014-4616
* SECURITY UPDATE: code execution or file disclosure via CGIHTTPServer
  - debian/patches/CVE-2014-4650.patch: url unquote path in
    Lib/CGIHTTPServer.py, added test to Lib/test/test_httpservers.py.
  - CVE-2014-4650
* SECURITY UPDATE: information disclosure via buffer function
  - debian/patches/CVE-2014-7185.patch: avoid overflow in
    Objects/bufferobject.c, added test to Lib/test/test_buffer.py.
  - CVE-2014-7185

lp:ubuntu/vivid/python2.7 bug 2 Mature 2015-04-02 20:30:49 UTC
127. * Update to 20150401, taken from the ...

Author: Matthias Klose
Revision Date: 2015-04-02 16:13:26 UTC

* Update to 20150401, taken from the 2.7 release branch.
  - Issue #23629: Fix the default __sizeof__ implementation for
    variable-sized objects.
  - Issue #21526: Tkinter now supports new boolean type in Tcl 8.5.
  - Issue #23838: linecache now clears the cache and returns an empty
    result on MemoryError.
  - Issue #23742: ntpath.expandvars() no longer loses unbalanced single
    quotes.
  - Issue #21802: The reader in BufferedRWPair now is closed even when
    closing writer failed in BufferedRWPair.close().
  - Issue #23671: string.Template now allows to specify the "self" parameter
    as keyword argument. string.Formatter now allows to specify the "self"
    and the "format_string" parameters as keyword arguments.
  - Issue #21560: An attempt to write a data of wrong type no longer cause
    GzipFile corruption.
  - Issue #23647: Increase imaplib's MAXLINE to accommodate modern mailbox
    sizes.
  - Issue #23539: If body is None, http.client.HTTPConnection.request now
    sets Content-Length to 0 for PUT, POST, and PATCH headers to avoid
    411 errors from some web servers.
  - Issue #23136: _strptime now uniformly handles all days in week 0,
    including Dec 30 of previous year.
  - Issue #23138: Fixed parsing cookies with absent keys or values in
    cookiejar.
  - Issue #23051: multiprocessing.Pool methods imap() and imap_unordered()
    now handle exceptions raised by an iterator.
  - Issue #22928: Disabled HTTP header injections in httplib.
  - Issue #23615: Module tarfile now can be reloaded with imp.reload().
  - Issue #23799: Added test.test_support.start_threads() for running and
    cleaning up multiple threads.
  - Issue #22390: test.regrtest now emits a warning if temporary files or
    directories are left after running a test.
  - Issue #23583: Added tests for standard IO streams in IDLE.
  - Issue #23583: Fixed writing unicode to standard output stream in IDLE.
* Re-apply the fix for issue #22079. This is now a warning instead of an
  error. LP: #1426294.
* Fix issue #23842, SystemError in os.minor, os.major. LP: #1435242.

lp:ubuntu/vivid-proposed/python2.7 bug 1 Development 2015-04-02 15:31:38 UTC
127. * Update to 20150401, taken from the ...

Author: Matthias Klose
Revision Date: 2015-04-02 16:13:26 UTC

* Update to 20150401, taken from the 2.7 release branch.
  - Issue #23629: Fix the default __sizeof__ implementation for
    variable-sized objects.
  - Issue #21526: Tkinter now supports new boolean type in Tcl 8.5.
  - Issue #23838: linecache now clears the cache and returns an empty
    result on MemoryError.
  - Issue #23742: ntpath.expandvars() no longer loses unbalanced single
    quotes.
  - Issue #21802: The reader in BufferedRWPair now is closed even when
    closing writer failed in BufferedRWPair.close().
  - Issue #23671: string.Template now allows to specify the "self" parameter
    as keyword argument. string.Formatter now allows to specify the "self"
    and the "format_string" parameters as keyword arguments.
  - Issue #21560: An attempt to write a data of wrong type no longer cause
    GzipFile corruption.
  - Issue #23647: Increase imaplib's MAXLINE to accommodate modern mailbox
    sizes.
  - Issue #23539: If body is None, http.client.HTTPConnection.request now
    sets Content-Length to 0 for PUT, POST, and PATCH headers to avoid
    411 errors from some web servers.
  - Issue #23136: _strptime now uniformly handles all days in week 0,
    including Dec 30 of previous year.
  - Issue #23138: Fixed parsing cookies with absent keys or values in
    cookiejar.
  - Issue #23051: multiprocessing.Pool methods imap() and imap_unordered()
    now handle exceptions raised by an iterator.
  - Issue #22928: Disabled HTTP header injections in httplib.
  - Issue #23615: Module tarfile now can be reloaded with imp.reload().
  - Issue #23799: Added test.test_support.start_threads() for running and
    cleaning up multiple threads.
  - Issue #22390: test.regrtest now emits a warning if temporary files or
    directories are left after running a test.
  - Issue #23583: Added tests for standard IO streams in IDLE.
  - Issue #23583: Fixed writing unicode to standard output stream in IDLE.
* Re-apply the fix for issue #22079. This is now a warning instead of an
  error. LP: #1426294.
* Fix issue #23842, SystemError in os.minor, os.major. LP: #1435242.

lp:ubuntu/precise-proposed/python2.7 bug 2 Mature 2014-12-18 19:11:49 UTC
61. * Ensure failed connections to /dev/l...

Author: James Page
Revision Date: 2014-12-18 12:05:28 UTC

* Ensure failed connections to /dev/log are full closed, preventing
  infinite loop on logging applications due to socket state (LP: #1081022):
  - d/p/syslog.diff: Cherry picked fix from upstream bugtracker.

lp:ubuntu/utopic/python2.7 2 Mature 2014-10-17 16:47:06 UTC
119. Pass -ffat-lto-objects for LTO enable...

Author: Matthias Klose
Revision Date: 2014-10-17 16:47:06 UTC

Pass -ffat-lto-objects for LTO enabled builds with GCC 4.9.

lp:ubuntu/utopic-proposed/python2.7 1 Development 2014-10-17 16:47:06 UTC
119. Pass -ffat-lto-objects for LTO enable...

Author: Matthias Klose
Revision Date: 2014-10-17 16:47:06 UTC

Pass -ffat-lto-objects for LTO enabled builds with GCC 4.9.

lp:ubuntu/trusty-proposed/python2.7 bug 1 Development 2014-03-22 22:55:53 UTC
105. * Update to 20140322, taken from the ...

Author: Matthias Klose
Revision Date: 2014-03-22 14:31:54 UTC

* Update to 20140322, taken from the 2.7 branch.
* Install updated idle icons. LP: #1295969.
* Update the ssl.match_hostname backport: Change behavior of
  ``ssl.match_hostname()`` to follow RFC 6125, for security reasons.
  It now doesn't match multiple wildcards nor wildcards inside IDN fragments.
  Closes: #740255.

lp:ubuntu/trusty/python2.7 2 Mature 2014-03-22 14:31:54 UTC
105. * Update to 20140322, taken from the ...

Author: Matthias Klose
Revision Date: 2014-03-22 14:31:54 UTC

* Update to 20140322, taken from the 2.7 branch.
* Install updated idle icons. LP: #1295969.
* Update the ssl.match_hostname backport: Change behavior of
  ``ssl.match_hostname()`` to follow RFC 6125, for security reasons.
  It now doesn't match multiple wildcards nor wildcards inside IDN fragments.
  Closes: #740255.

lp:ubuntu/saucy-updates/python2.7 2 Mature 2014-03-03 18:47:44 UTC
93. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2014-02-27 09:06:35 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  buffer overflow in socket.recvfrom_into
  - debian/patches/CVE-2014-1912.diff: check buffer length in
    Modules/socketmodule.c, added tests to Lib/test/test_socket.py.
  - CVE-2014-1912

lp:ubuntu/saucy-security/python2.7 2 Mature 2014-03-03 18:12:27 UTC
93. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2014-02-27 09:06:35 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  buffer overflow in socket.recvfrom_into
  - debian/patches/CVE-2014-1912.diff: check buffer length in
    Modules/socketmodule.c, added tests to Lib/test/test_socket.py.
  - CVE-2014-1912

lp:ubuntu/quantal-security/python2.7 2 Mature 2014-02-27 09:14:11 UTC
64. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2014-02-27 09:14:11 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  buffer overflow in socket.recvfrom_into
  - debian/patches/CVE-2014-1912.diff: check buffer length in
    Modules/socketmodule.c, added tests to Lib/test/test_socket.py.
  - CVE-2014-1912

lp:ubuntu/quantal-updates/python2.7 2 Mature 2014-02-27 09:14:11 UTC
64. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2014-02-27 09:14:11 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  buffer overflow in socket.recvfrom_into
  - debian/patches/CVE-2014-1912.diff: check buffer length in
    Modules/socketmodule.c, added tests to Lib/test/test_socket.py.
  - CVE-2014-1912

lp:ubuntu/raring-updates/python2.7 2 Mature 2013-10-01 15:58:03 UTC
87. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2013-09-25 15:13:36 UTC

* SECURITY UPDATE: denial of service via ssl hostname wildcards
  - debian/patches/CVE-2013-2099.diff: limit number of wildcards in
    Lib/ssl.py.
  - CVE-2013-2099
* SECURITY UPDATE: incorrect ssl hostname verification
  - debian/patches/CVE-2013-4238.diff: correctly handle NULL bytes in
    the subjectAltName in Modules/_ssl.c, add test to
    Lib/test/test_ssl.py, Lib/test/nullbytecert.pem.
  - CVE-2013-4238
* This package does _not_ contain the changes from 2.7.4-2ubuntu3.1 in
  raring-proposed.

lp:ubuntu/raring-security/python2.7 2 Mature 2013-10-01 15:46:08 UTC
87. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2013-09-25 15:13:36 UTC

* SECURITY UPDATE: denial of service via ssl hostname wildcards
  - debian/patches/CVE-2013-2099.diff: limit number of wildcards in
    Lib/ssl.py.
  - CVE-2013-2099
* SECURITY UPDATE: incorrect ssl hostname verification
  - debian/patches/CVE-2013-4238.diff: correctly handle NULL bytes in
    the subjectAltName in Modules/_ssl.c, add test to
    Lib/test/test_ssl.py, Lib/test/nullbytecert.pem.
  - CVE-2013-4238
* This package does _not_ contain the changes from 2.7.4-2ubuntu3.1 in
  raring-proposed.

lp:ubuntu/saucy-proposed/python2.7 bug 2 Mature 2013-09-19 13:52:55 UTC
92. For autopkg tests, only run the separ...

Author: Matthias Klose
Revision Date: 2013-09-19 15:31:48 UTC

For autopkg tests, only run the separate tests when defined.

lp:ubuntu/saucy/python2.7 1 Development 2013-09-19 13:52:55 UTC
92. For autopkg tests, only run the separ...

Author: Matthias Klose
Revision Date: 2013-09-19 15:31:48 UTC

For autopkg tests, only run the separate tests when defined.

lp:ubuntu/raring-proposed/python2.7 bug 1 Development 2013-07-05 08:18:41 UTC
87. debian/patches/atomic-pyc-rename.diff...

Author: Barry Warsaw
Revision Date: 2013-06-07 11:08:14 UTC

debian/patches/atomic-pyc-rename.diff: Add patch to fix possible race
conditions when writing .pyc/.pyo files in py_compile.py.
Issue #13146. LP: #1058884

lp:ubuntu/quantal-proposed/python2.7 bug 2 Mature 2013-07-05 08:18:37 UTC
64. debian/patches/atomic-pyc-rename.diff...

Author: Barry Warsaw
Revision Date: 2013-06-07 11:20:19 UTC

debian/patches/atomic-pyc-rename.diff: Add patch to fix possible race
conditions when writing .pyc/.pyo files in py_compile.py.
Issue #13146. LP: #1058884

lp:ubuntu/raring/python2.7 bug 2 Mature 2013-04-19 15:21:48 UTC
86. * Fix typo in the 'testsuite' autopkg...

Author: Matthias Klose
Revision Date: 2013-04-19 15:21:48 UTC

* Fix typo in the 'testsuite' autopkg test, skip running the test_uuid
  test, run test_io in a different test run on i386.
* Fix a distutils test with the deb install layout.

lp:~voronov84/ubuntu/raring/python2.7/fix-for-1166644 bug 1 Development 2013-04-09 09:02:55 UTC
82. Fixed name error

Author: Andrey
Revision Date: 2013-04-09 09:00:11 UTC

Fixed name error

lp:~maxb/ubuntu/lucid/python2.7/py2.7 1 Development 2013-03-23 20:58:47 UTC
59. * Disable check and bench unless over...

Author: Max Bowsher
Revision Date: 2012-11-16 00:54:37 UTC

* Disable check and bench unless overridden in DEB_BUILD_OPTIONS.
* Backport to lucid:
  - Reduce Berkeley DB version from 5.1 to 4.8.
  - Do not use system expat, it is too old.
  - libtinfo-dev is not available.
  - Disable lto.
  - Remove build of python-doc package, because python-sphinx is too old to
    successfully build it, and remove python-sphinx builddep.

lp:ubuntu/oneiric-updates/python2.7 2 Mature 2012-10-02 20:05:09 UTC
41. * SECURITY UPDATE: fix hash randomiza...

Author: Jamie Strandboge
Revision Date: 2012-07-13 16:02:35 UTC

* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944

lp:ubuntu/natty-updates/python2.7 2 Mature 2012-10-02 20:05:00 UTC
30. * SECURITY UPDATE: fix hash randomiza...

Author: Jamie Strandboge
Revision Date: 2012-09-27 15:38:07 UTC

* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURITY UPDATE: update urllib and urllib2 for invalid redirections
  - debian/patches/CVE-2011-1521.diff: only process Location headers for
    http, https, and ftp
  - http://bugs.python.org/issue11662
  - CVE-2011-1521
* SECURITY UPDATE: fix XSS in SimpleHTTPServer
  - debian/patches/CVE-2011-4940.diff: add a charset parameter to the
    Content-type
  - CVE-2011-4940
* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944

lp:ubuntu/oneiric-security/python2.7 2 Mature 2012-10-02 19:51:46 UTC
41. * SECURITY UPDATE: fix hash randomiza...

Author: Jamie Strandboge
Revision Date: 2012-07-13 16:02:35 UTC

* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944

lp:ubuntu/natty-security/python2.7 2 Mature 2012-10-02 19:51:38 UTC
30. * SECURITY UPDATE: fix hash randomiza...

Author: Jamie Strandboge
Revision Date: 2012-09-27 15:38:07 UTC

* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURITY UPDATE: update urllib and urllib2 for invalid redirections
  - debian/patches/CVE-2011-1521.diff: only process Location headers for
    http, https, and ftp
  - http://bugs.python.org/issue11662
  - CVE-2011-1521
* SECURITY UPDATE: fix XSS in SimpleHTTPServer
  - debian/patches/CVE-2011-4940.diff: add a charset parameter to the
    Content-type
  - CVE-2011-4940
* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944

lp:ubuntu/quantal/python2.7 bug 1 Development 2012-09-26 13:08:17 UTC
62. Fix issue #16012: Fix a regression in...

Author: Matthias Klose
Revision Date: 2012-09-26 13:08:17 UTC

Fix issue #16012: Fix a regression in pyexpat. The parser's UseForeignDTD()
method doesn't require an argument again. LP: #1056740.

lp:~pythoneers/ubuntu/lucid/python2.7/ltsppa.ctypes 1 Development 2012-07-17 16:02:59 UTC
59. Try to back port ctypes crasher fixes...

Author: Barry Warsaw
Revision Date: 2012-07-17 16:00:06 UTC

Try to back port ctypes crasher fixes, probably unsuccessfully.

lp:ubuntu/precise/python2.7 bug 1 Development 2012-04-20 14:19:23 UTC
57. * python2.7-minimal needs a versioned...

Author: Steve Langasek
Revision Date: 2012-04-20 14:19:23 UTC

* python2.7-minimal needs a versioned depends on python-minimal, not a
  Conflicts. Conflicts with essential packages, versioned or otherwise,
  are a serious problem for upgrades, as the previous upload demonstrated.
  Instead, we allow a circular dependency between python2.7-minimal and
  python-minimal, and rely on the fact that the package manager ensures
  new versions of both packages will be unpacked before running the
  maintainer script from python2.7-minimal. LP: #986374.
* Our versioned dependency on python-minimal is 2.6.6-3+squeeze1, which is
  the first version shipping a pycompile that supports passing a -V option
  referring to a version python-minimal doesn't already know about.

lp:ubuntu/oneiric/python2.7 bug 2 Mature 2011-10-04 16:09:29 UTC
40. * Use the ncursesw include directory ...

Author: Matthias Klose
Revision Date: 2011-10-04 16:09:29 UTC

* Use the ncursesw include directory when linking with ncursesw.
* Rebuild with libreadline not linked with libncurses*.

lp:~pythoneers/ubuntu/lucid/python2.7/ltsppa bug 1 Development 2011-09-14 23:21:24 UTC
37. * Back port to Lucid LTS PPA. - App...

Author: Barry Warsaw
Revision Date: 2011-09-14 23:19:32 UTC

* Back port to Lucid LTS PPA.
  - Apply patch for issue 10309, required for mremap() definition.

lp:ubuntu/maverick-proposed/python2.7 bug 2 Mature 2011-05-09 21:15:42 UTC
14. No change rebuild to fix multiprocess...

Author: Barry Warsaw
Revision Date: 2011-04-26 17:23:27 UTC

No change rebuild to fix multiprocessing module. (LP: #672209)

lp:ubuntu/natty/python2.7 bug 2 Mature 2011-04-11 11:54:52 UTC
29. Force linking the curses module again...

Author: Matthias Klose
Revision Date: 2011-04-11 11:54:52 UTC

Force linking the curses module against libncursesw.

lp:~peter-pearse/ubuntu/natty/python2.7/prop003 (Has a merge proposal) 1 Development 2011-04-07 13:01:30 UTC
29. * Modules/Setup.dist - drop system ...

Author: Peter Pearse
Revision Date: 2011-04-07 13:00:33 UTC

  * Modules/Setup.dist - drop system paths for zlib.
  * Makefile.pre.in - Use BUILDPYTHON where applicable for cross builds.
  * setup.py - For cross builds, pass cross toolchain info in python
    environment.
  * debian/rules - Build a build host python for use during a cross
    build. Adjust the configuration files & make environment
    accordingly.

lp:~peter-pearse/ubuntu/natty/python2.7/prop002 (Has a merge proposal) 1 Development 2011-03-09 15:17:20 UTC
28. s patch - for detilas see debian/chan...

Author: Peter Pearse
Revision Date: 2011-03-09 15:16:14 UTC

s patch - for detilas see debian/changelog

lp:~peter-pearse/ubuntu/natty/python2.7/prop001 (Has a merge proposal) 1 Development 2011-02-02 16:02:39 UTC
27. Modify to allow cross building ----...

Author: Peter Pearse
Revision Date: 2011-02-02 16:00:35 UTC

 Modify to allow cross building

------------- This line and the following will be ignored --------------

dded:
  debian/patches/cross.diff
modified:
  debian/changelog
  debian/patches/series.in
  debian/rules

lp:ubuntu/maverick/python2.7 bug 2 Mature 2010-09-15 21:52:43 UTC
13. * Update to 20100915, taken from the ...

Author: Matthias Klose
Revision Date: 2010-09-15 17:43:18 UTC

* Update to 20100915, taken from the 2.7 branch.
  - Fix issue #9729, Unconnected SSLSocket.{send,recv} raises TypeError
    (Andrew Bennetts). LP: #637821.
* Add copyright information for expat, libffi and zlib. Addresses: #596276.
* Apply proposed fix for issue 9054, configure --with-system-expat.
* Provide Lib/plat-gnukfreebsd[78] (Jakub Wilk). Addresses: #593818.

143 of 43 results