~ubuntu-branches/ubuntu/hardy/python2.4/hardy-security

• Changes
• Files

~ubuntu-branches/ubuntu/hardy/python2.4/hardy-security » Changes from revision 49

From Revision 49 to 30

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
49		* SECURITY UPDATE: optionally disallow setting sys.path when... * SECURITY UPDATE: optionally disallow setting sys.path when setting   sys.argv   - debian/patches/CVE-2008-5983.dpatch: add new C API function,     PySys_SetArgvEx   - CVE-2008-5983 * SECURITY UPDATE: fix integer overflows in audioop module   - debian/patches/CVE-2010-1634.dpatch: Fix incorrect and UB-inducing     overflow checks   - CVE-2010-1634 * SECURITY UPDATE: fix DoS in audioop module   - debian/patches/CVE-2010-2089.dpatch: ensure that the input string length     is a multiple of the frame size   - CVE-2010-2089 * SECURITY UPDATE: Fix CGIHTTPServer information disclosure.   - debian/patches/CVE-2011-1015.dpatch: Relative paths are now collapsed     within the url properly before looking in cgi_directories.   - CVE-2011-1015 * SECURITY UPDATE: update urllib and urllib2 for invalid redirections   - debian/patches/CVE-2011-1521.dpatch: only process Location headers for     http, https, and ftp   - http://bugs.python.org/issue11662   - CVE-2011-1521 * SECURITY UPDATE: fix XSS in SimpleHTTPServer   - debian/patches/CVE-2011-4940.dpatch: add a charset parameter to the     Content-type   - CVE-2011-4940 * SECURE UPDATE: http://bugs.python.org/issue13512   - debian/patches/CVE-2011-4944.dpatch: create ~/.pypirc securely   - CVE-2011-4944 * SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon   malformed POST request   - debian/patches/CVE-2012-0845.dpatch: break if don't receive EOF in     Lib/SimpleXMLRPCServer.py   - CVE-2012-0845 * SECURITY UPDATE: Denial of service via hash collisions   - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Add random salt value     to hash inputs in lib/xmlparse.c   - CVE-2012-0876 * SECURITY UPDATE: Denial of service via memory leak   - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Properly reallocate     memory in lib/xmlparse.c   - CVE-2012-1148 * SECURITY UPDATE: fix DoS in smtpd.py   - debian/patches/CVE-2010-3493.dpatch: adds proper error handling on     accept() when smtpd accepts new incoming connections   - http://bugs.python.org/issue9129   - CVE-2010-3493 * debian/patches/testsuite-linux3.dpatch: adjust testsuite for linux3	Jamie Strandboge	2.4.5-1ubuntu4.4	11 years ago
48		* SECURITY UPDATE: fix DoS via malformed XML * SECURITY UPDATE: fix DoS via malformed XML   - debian/patches/CVE-2009-3720.dpatch: update Modules/expat/xmltok_impl.c     to not access beyond end of input string   - CVE-2009-3720 * SECURITY UPDATE: fix DoS via malformed UTF-8 sequences   - debian/patches/CVE-2009-3560.dpatch: update Modules/expat/xmlparse.c to     properly recognize the end of a token   - CVE-2009-3560	Jamie Strandboge	2.4.5-1ubuntu4.3	14 years ago
47		* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer   overflows in the imageop module   - debian/rules, debian/patches/CVE-2008-4864.dpatch: introduce new     functions for size checks in Modules/imageop.c, introduce tests in     Lib/test/test_imageop.py.   - CVE-2008-4864 * SECURITY UPDATE: denial of service or possible arbitrary code execution   via multiple integer overflows in the expandtabs method   - debian/rules, debian/patches/CVE-2008-5031.dpatch: make sure we don't     overflow in Objects/{stringobject,unicodeobject}.c and add tests to     Lib/test/test_{str,unicode}.py.   - CVE-2008-5031	Marc Deslauriers	2.4.5-1ubuntu4.2	14 years ago
46		* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer overflows. * debian/rules, debian/patches/CVE-2008-3142.dpatch,   debian/patches/CVE-2008-3144.dpatch, debian/patches/CVE-2008-2315.dpatch:   upstream fixes, thanks to Robert Buchholz.	Kees Cook	2.4.5-1ubuntu4.1	15 years ago
45		* Fix CVE-2008-1679, integer overflows in the imageop module... * Fix CVE-2008-1679, integer overflows in the imageop module. * Fix CVE-2008-1721, integer signedness error in the zlib extension module. * Fix issue, PyString_FromStringAndSize() to be considered unsafe.	Matthias Klose	2.4.5-1ubuntu4	16 years ago
44		* Build depend on libdb4.6-dev on amd64, i386, lpia; use lib... * Build depend on libdb4.6-dev on amd64, i386, lpia; use libdb4.2-dev   for all other architectures. * Backport new function signal.set_wakeup_fd from the trunk.   Background: http://bugzilla.gnome.org/show_bug.cgi?id=481569 * Regenerate the documentation.	Matthias Klose	2.4.5-1ubuntu2	16 years ago
43		Python 2.4.5 release. Python 2.4.5 release.	Matthias Klose	2.4.5-1ubuntu1	16 years ago
42		* Merge with Debian; remaining changes: * Merge with Debian; remaining changes:   - Rebuild the control file.   - Build the -doc package from this source.	Matthias Klose	2.4.5~c1-1ubuntu1	16 years ago
41		Build-depend on libdb4.2-dev on all architectures; 4.6 is se... Build-depend on libdb4.2-dev on all architectures; 4.6 is seriously broken when used with the _bsddb extension. LP: #196147.	Matthias Klose	2.4.4-7ubuntu5	16 years ago
40		Add gc module to python2.4-minimal. Add gc module to python2.4-minimal.	Matthias Klose	2.4.4-7ubuntu4	16 years ago
39		* SVN update up to 2008-02-26. * SVN update up to 2008-02-26.   - Fix issue #1336, a race condition in subprocess.Popen. * Move site customization into sitecustomize.py, don't make site.py   a config file. Addresses: #309719, #413172, #457361. * Move site.py to python2.4-minimal, remove `addbuilddir' from site.py,   which is unnecessary for installed builds. * python2.4-dev: Recommend libc-dev instead of suggesting it. LP: #164909. * Fix issue 961805, Tk Text.edit_modified() fails. LP: #84720.	Matthias Klose	2.4.4-7ubuntu3	16 years ago
38		debian/control.in: don't set XSBC-Original-Maintainer here, ... debian/control.in: don't set XSBC-Original-Maintainer here, it will be fixed up for us in the control-file target when debian/control is generated.  LP: #194556.	Steve Langasek	2.4.4-7ubuntu2	16 years ago
37		* Merge with Debian; remaining changes: * Merge with Debian; remaining changes:   - Rebuild the control file.   - Build the -doc package from this source.	Matthias Klose	2.4.4-7ubuntu1	16 years ago
36		Trigger rebuild for hppa Trigger rebuild for hppa	LaMont Jones	2.4.4-6ubuntu4	16 years ago
35		Remove the backport of the linecache patch. Remove the backport of the linecache patch.	Matthias Klose	2.4.4-6ubuntu3	16 years ago
34		Revert back to use db4.5 for the bsddb3 extension. The DB_HA... Revert back to use db4.5 for the bsddb3 extension. The DB_HASH access method databases can lockup the process.	Matthias Klose	2.4.4-6ubuntu2	16 years ago
33		* Merge with Debian; remaining changes: * Merge with Debian; remaining changes:   - Rebuild the control file.   - Build the -doc package from this source.	Matthias Klose	2.4.4-6ubuntu1	16 years ago
32		* Build using db4.6. * Build using db4.6. * Build-depend on emacs22, rebuild the documentation.	Matthias Klose	2.4.4-5ubuntu2	16 years ago
31		* Merge with Debian; remaining changes: * Merge with Debian; remaining changes:   - Rebuild the control file.   - Build the -doc package from this source.	Matthias Klose	2.4.4-5ubuntu1	16 years ago
30		Merge with Debian. Merge with Debian.	Matthias Klose	2.4.4-4ubuntu1	16 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1