~ubuntu-branches/ubuntu/utopic/python2.7/utopic-security

Viewing all changes in revision 120.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2015-06-18 09:25:31 UTC
  • Revision ID: package-import@ubuntu.com-20150618092531-d1dwdey4mwbgqs47
Tags: 2.7.8-10ubuntu1.1
* SECURITY UPDATE: denial of service in multiple servers
  - debian/patches/CVE-2013-1752-poplib.patch: limit maximum line length
    in Lib/poplib.py, added test to Lib/test/test_poplib.py.
  - debian/patches/CVE-2013-1752-smtplib.patch: limit amount read from
    the network in Lib/smtplib.py, added test to
    Lib/test/test_smtplib.py.
  - CVE-2013-1752
* SECURITY UPDATE: denial of service via xmlrpc gzip-compressed
  HTTP bodies
  - debian/patches/CVE-2013-1753.patch: add default limit in
    Lib/xmlrpclib.py, added test to Lib/test/test_xmlrpc.py.
  - CVE-2013-1753
* debian/patches/fix_ssl_test_dh.patch: replace 512 bit dh key with a
  2014 bit one to fix test failure with OpenSSL security update.

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: