-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 27 Jan 2025 20:35:21 +0000
Source: restrictedpython
Architecture: source
Version: 8.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Closes: 1084057 1094026
Changes:
restrictedpython (8.0-1) unstable; urgency=medium
.
* Team upload.
* debian/watch: Accept lower-case restrictedpython-*.
* New upstream release:
- CVE-2024-47532: Prevent information leakage via `AttributeError.obj`
and the `string` module (closes: #1084057).
- CVE-2025-22153: Disallow `try/except*` clauses due to a possible
sandbox escape and probable uselessness of this feature in the context
of `RestrictedPython`. In addition, remove `ExceptionGroup` from
`safe_builtins` (as useful only with `try/except*`) (closes:
#1094026).
* Use dh-sequence-python3.
* Use pybuild-plugin-pyproject.
* Switch to autopkgtest-pkg-pybuild.
Checksums-Sha1:
dadb1b1736dc81d3a8559e1d90791457eb2c8e53 2315 restrictedpython_8.0-1.dsc
7110249edde92a30cd0bea407ce1994c085d0f6f 448747 restrictedpython_8.0.orig.tar.gz
23e612b87146d05a91ad773190b06d33a72382ff 4224 restrictedpython_8.0-1.debian.tar.xz
Checksums-Sha256:
e9d6286c19ba9d4de922cfef9f956ee631c09a78fd8677cf91c8a9a952d2eb68 2315 restrictedpython_8.0-1.dsc
3af2312bc67e5fced887fb85b006c89861da72488128b155beea81eb6a0a9b24 448747 restrictedpython_8.0.orig.tar.gz
523507f4a881a9c0820e6ec9b42f0765197cbc6a91993244e5bb28f496f44346 4224 restrictedpython_8.0-1.debian.tar.xz
Files:
d3ff80e433df206eca767131ad9c477a 2315 python optional restrictedpython_8.0-1.dsc
324371e5ea45d254e68d4ea147ef2eab 448747 python optional restrictedpython_8.0.orig.tar.gz
cfd48ca5b69639cbcfbc784f4e90d8ea 4224 python optional restrictedpython_8.0-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=1WPB
-----END PGP SIGNATURE-----
Attachment:
pgppAO1amZ6pa.pgp
Description: PGP signature