~ubuntu-branches/ubuntu/hardy/python2.5/hardy-updates : changes

~ubuntu-branches/ubuntu/hardy/python2.5/hardy-updates » Changes from revision 52

From Revision 52 to 33

Rev	Summary	Authors	Tags	Date
52	* SECURITY UPDATE: optionally disallow setting sys.path when... * SECURITY UPDATE: optionally disallow setting sys.path when setting sys.argv - debian/patches/CVE-2008-5983.dpatch: add new C API function, PySys_SetArgvEx - CVE-2008-5983 * SECURITY UPDATE: fix integer overflows in audioop module - debian/patches/CVE-2010-1634.dpatch: Fix incorrect and UB-inducing overflow checks - CVE-2010-1634 * SECURITY UPDATE: fix DoS in audioop module - debian/patches/CVE-2010-2089.dpatch: ensure that the input string length is a multiple of the frame size - CVE-2010-2089 * SECURITY UPDATE: Fix CGIHTTPServer information disclosure. - debian/patches/CVE-2011-1015.dpatch: Relative paths are now collapsed within the url properly before looking in cgi_directories. - CVE-2011-1015 * SECURITY UPDATE: update urllib and urllib2 for invalid redirections - debian/patches/CVE-2011-1521.dpatch: only process Location headers for http, https, and ftp - http://bugs.python.org/issue11662 - CVE-2011-1521 * SECURITY UPDATE: fix XSS in SimpleHTTPServer - debian/patches/CVE-2011-4940.dpatch: add a charset parameter to the Content-type - CVE-2011-4940 * SECURE UPDATE: http://bugs.python.org/issue13512 - debian/patches/CVE-2011-4944.dpatch: create ~/.pypirc securely - CVE-2011-4944 * SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon malformed POST request - debian/patches/CVE-2012-0845.dpatch: break if don't receive EOF in Lib/SimpleXMLRPCServer.py - CVE-2012-0845 * SECURITY UPDATE: Denial of service via hash collisions - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Add random salt value to hash inputs in lib/xmlparse.c - CVE-2012-0876 * SECURITY UPDATE: Denial of service via memory leak - debian.patches/CVE-2012-0876+CVE-2012-1148.dpatch: Properly reallocate memory in lib/xmlparse.c - CVE-2012-1148 * SECURITY UPDATE: fix DoS in smtpd.py - debian/patches/CVE-2010-3493.dpatch: adds proper error handling on accept() when smtpd accepts new incoming connections - http://bugs.python.org/issue9129 - CVE-2010-3493	Jamie Strandboge	2.5.2-2ubuntu6.2	11 years ago
51	* SECURITY UPDATE: fix DoS via malformed XML * SECURITY UPDATE: fix DoS via malformed XML - debian/patches/CVE-2009-3720.dpatch: update Modules/expat/xmltok_impl.c to not access beyond end of input string - CVE-2009-3720 * SECURITY UPDATE: fix DoS via malformed UTF-8 sequences - debian/patches/CVE-2009-3560.dpatch: update Modules/expat/xmlparse.c to properly recognize the end of a token - CVE-2009-3560	Jamie Strandboge	2.5.2-2ubuntu6.1	14 years ago
50	* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer overflows - debian/rules, debian/patches/CVE-2008-4864.dpatch: introduce new functions for size checks in Modules/imageop.c, introduce tests in Lib/test/test_imageop.py. - CVE-2008-4864 * Increment release to -2ubuntu6 to supersede a package that was deleted from -proposed. This release does _not_ contain the -2ubuntu5 changes.	Marc Deslauriers	2.5.2-2ubuntu6	14 years ago
49	* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer overflows. * debian/rules, debian/patches/CVE-2008-3144.dpatch, debian/patches/CVE-2008-3142.dpatch, debian/patches/CVE-2008-2316.dpatch, debian/patches/CVE-2008-2315.dpatch: upstream fixes, thanks to Robert Buchholz.	Kees Cook	2.5.2-2ubuntu4.1	15 years ago
48	* Fix CVE-2008-1679, integer overflows in the imageop module... * Fix CVE-2008-1679, integer overflows in the imageop module. * Fix CVE-2008-1721, integer signedness error in the zlib extension module. * Fix issue 2587, PyString_FromStringAndSize() to be considered unsafe. * Fixes for issues (taken from the 2.5 branch): - Issue 2321: Reduce memory usage (increase the memory that is returned to the system) by using pymalloc for the data of unicode objects. - Issue 2515: _sqlite: Don't crash when trying to fetch data from a closed cursor. - Issue 2482: Make sure that the coefficient of a Decimal instance is stored as a str instance rather than a unicode instance. Regression compared to 2.5.1.	Matthias Klose	2.5.2-2ubuntu4	16 years ago
47	Fix urllib2 file descriptor happens byte-at-a-time, revertin... Fix urllib2 file descriptor happens byte-at-a-time, reverting a fix for excessively large memory allocations when calling .read() on a socket object wrapped with makefile(). LP: #214183.	Matthias Klose	2.5.2-2ubuntu3	16 years ago
46	* Build depend on libdb4.6-dev on amd64, i386, lpia; use lib... * Build depend on libdb4.6-dev on amd64, i386, lpia; use libdb4.2-dev for all other architectures. * Backport new function signal.set_wakeup_fd from the trunk. Background: http://bugzilla.gnome.org/show_bug.cgi?id=481569 * Regenerate the documentation.	Matthias Klose	2.5.2-2ubuntu2	16 years ago
45	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Include the pregenerated documentation. - Set priority of python2.5-minimal to required. - Build python2.5-doc from the pregenerated documentation.	Matthias Klose	2.5.2-2ubuntu1	16 years ago
44	Build-depend on libdb4.2-dev on all architectures; 4.6 is se... Build-depend on libdb4.2-dev on all architectures; 4.6 is seriously broken when used with the _bsddb extension. LP: #196147.	Matthias Klose	2.5.2-0ubuntu5	16 years ago
43	Move site.py to python2.4-minimal, remove `addbuilddir' from... Move site.py to python2.4-minimal, remove `addbuilddir' from site.py, which is unnecessary for installed builds.	Matthias Klose	2.5.2-0ubuntu4	16 years ago
42	Fix issue 961805, Tk Text.edit_modified() fails. LP: #84720. Fix issue 961805, Tk Text.edit_modified() fails. LP: #84720.	Matthias Klose	2.5.2-0ubuntu3	16 years ago
41	Unapply deb-setup patch before upload. Unapply deb-setup patch before upload.	Matthias Klose	2.5.2-0ubuntu2	16 years ago
40	* New upstream bugfix version. * New upstream bugfix version. * Merge with Debian; remaining changes: - Include the pregenerated documentation. - Set priority of python2.5-minimal to required. - Build python2.5-doc from the pregenerated documentation. * Move site customization into sitecustomize.py, don't make site.py a config file. Addresses: #309719, #413172, #457361. * python2.5-dev: Recommend libc-dev instead of suggesting it. LP: #164909.	Matthias Klose	2.5.2-0ubuntu1	16 years ago
39	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Include the pregenerated documentation. - Set priority of python2.5-minimal to required. - Build python2.5-doc from the pregenerated documentation.	Matthias Klose	2.5.1-6ubuntu1	16 years ago
38	Move developer related docs to the -dev package. Move developer related docs to the -dev package.	Matthias Klose	2.5.1-5ubuntu5	16 years ago
37	* Fix segfault in _ctypes module when configured with --with... * Fix segfault in _ctypes module when configured with --with-system-ffi. LP: #72505. * Configure --with-system-ffi. * Enable running the testsuite. * Update to 20070929, taken from the 2.5 release branch. * Regenerate the documentation.	Matthias Klose	2.5.1-5ubuntu4	16 years ago
36	Do not apply the db4.6 configuration patch. Do not apply the db4.6 configuration patch.	Matthias Klose	2.5.1-5ubuntu3	16 years ago
35	* Revert back to use db4.5 for the bsddb3 extension. The DB_... * Revert back to use db4.5 for the bsddb3 extension. The DB_HASH access method databases can lockup the process. * Update to 20070813, taken from the 2.5 release branch.	Matthias Klose	2.5.1-5ubuntu2	16 years ago
34	* Fix handling of packages in linecache.py (Kevin Goodsell).... * Fix handling of packages in linecache.py (Kevin Goodsell). LP: #70902. * Bump debhelper to v5.	Matthias Klose	2.5.1-5ubuntu1	16 years ago
33	Search for db4.6 header files. LP: #132580. Search for db4.6 header files. LP: #132580.	Matthias Klose	2.5.1-4ubuntu2	16 years ago

Older »