Accepted python2.7 2.7.16-2+deb10u3 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 Sep 2023 09:59:17 +0200
Source: python2.7
Architecture: source
Version: 2.7.16-2+deb10u3
Distribution: buster-security
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Helmut Grohne <helmut@subdivi.de>
Changes:
python2.7 (2.7.16-2+deb10u3) buster-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* Add testsuite-fix-with-expat.diff: Fix autopkgtests with updated expat.
* Fix issue9189.diff: Update test suite to match behaviour change.
* autopkgtest: mark distutils as non-failing
* Add CVE-2021-23336.diff: Only use '&' as query string separator
* Add CVE-2022-0391.diff: Make urlsplit robust against newlines
* Add CVE-2022-48560.diff: Fix use-after-free in heapq module.
* Add CVE-2022-48565.diff: Reject entities declarations while parsing XML
plists.
* Add CVE-2022-48566.diff: Make constant time comparison more constant-time.
* Add CVE-2023-24329.diff: More WHATWG-compatible URL parsing
* Add CVE-2023-40217.diff: Prevent reading unauthenticated data on a
SSLSocket
Checksums-Sha1:
7be56bc94d80b35fc887238ca72cfac64b958cbf 3362 python2.7_2.7.16-2+deb10u3.dsc
40de79a8753703c97ffb1da166b5ba8923f7e391 338936 python2.7_2.7.16-2+deb10u3.diff.gz
9ae759323c657b6c56b1589a2b038eac7d95b431 14483 python2.7_2.7.16-2+deb10u3_amd64.buildinfo
Checksums-Sha256:
61289b1c5cb580fa68b4c5ef0d85c82f1321d175a7d68a74793aed2245e581c1 3362 python2.7_2.7.16-2+deb10u3.dsc
4e92d3caf343930a756e5fdf21a254c499c949bcbc95ed73a746770a564b60d5 338936 python2.7_2.7.16-2+deb10u3.diff.gz
6972cace97b046c92cf11794777dc153238226e25bf3ed5cdc9d4e6ddcc18e09 14483 python2.7_2.7.16-2+deb10u3_amd64.buildinfo
Files:
f4d888c197dfc6394abef8b0ceacb456 3362 python optional python2.7_2.7.16-2+deb10u3.dsc
134ec11d45c9a205ed2189b6cf2c48d6 338936 python optional python2.7_2.7.16-2+deb10u3.diff.gz
fe2adeae0fcaa1c010d30b89c028f1ea 14483 python optional python2.7_2.7.16-2+deb10u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cAO1
-----END PGP SIGNATURE-----
Reply to: