~ubuntu-branches/ubuntu/natty/python3.2/natty-security

Viewing all changes in revision 18.

  • Committer: Package Import Robot
  • Author(s): Jamie Strandboge
  • Date: 2012-10-19 22:07:38 UTC
  • Revision ID: package-import@ubuntu.com-20121019220738-za727u6cvugvahpg
Tags: 3.2-1ubuntu1.2
* SECURITY UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: http://bugs.python.org/issue14579
  - debian/patches/CVE-2012-2135.diff: fix vulnerability in the utf-16
    decoder after error handling
  - CVE-2012-2135

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: