Ubuntu
python3.6 package

python3.6 3.6.8-1~18.04.2 source package in Ubuntu

Changelog

python3.6 (3.6.8-1~18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: incorrect cookie domain check
    - debian/patches/CVE-2018-20852.patch: prefix dot in domain for proper
      subdomain validation in Lib/http/cookiejar.py,
      Lib/test/test_http_cookiejar.py.
    - CVE-2018-20852
  * SECURITY UPDATE: NULL pointer dereference via X509 certificate
    - debian/patches/CVE-2019-5010.patch: fix segfault in ssl cert parser
      in Lib/test/talos-2019-0758.pem, Lib/test/test_ssl.py,
      Modules/_ssl.c.
    - CVE-2019-5010
  * SECURITY UPDATE: improper handling of unicode encoding
    - debian/patches/CVE-2019-9636.patch: add check for characters in
      netloc that normalize to separators in Doc/library/urllib.parse.rst,
      Lib/test/test_urlparse.py, Lib/urllib/parse.py.
    - CVE-2019-9636
  * SECURITY UPDATE: HTTP header injection
    - debian/patches/CVE-2019-9740.patch: disallow control chars in http
      URLs in Lib/http/client.py, Lib/test/test_urllib.py,
      Lib/test/test_xmlrpc.py.
    - CVE-2019-9740
    - CVE-2019-9947
  * SECURITY UPDATE: urllib support the local_file: scheme
    - debian/patches/CVE-2019-9948.patch: disallow file reading in
      Lib/urllib/request.py, Lib/test/test_urllib.py.
    - CVE-2019-9948
  * SECURITY UPDATE: incomplete fix for CVE-2019-9636
    - debian/patches/CVE-2019-10160-1.patch: fix handling of
      pre-normalization characters in urlsplit() in
      Lib/test/test_urlparse.py, Lib/urllib/parse.py.
    - debian/patches/CVE-2019-10160-2.patch: correct fix to handle
      decomposition in usernames in Lib/test/test_urlparse.py,
      Lib/urllib/parse.py.
    - CVE-2019-10160

 -- Marc Deslauriers <email address hidden>  Tue, 20 Aug 2019 13:12:48 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Matthias Klose
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
python3.6_3.6.8.orig.tar.xz 16.4 MiB 35446241e995773b1bed7d196f4b624dadcadc8429f26282e756b2fb8a351193
python3.6_3.6.8-1~18.04.2.debian.tar.xz 212.5 KiB ce9303b92c356b74dcdf6be2fad96fcba395fddf2582f4c74837c46239ef60c0
python3.6_3.6.8-1~18.04.2.dsc 3.4 KiB 445fbb58eeb3968411ffa134c41bf2c8495f2c28c8a2f28330f7782f9d84e989

Available diffs

View changes file

Binary packages built by this source

idle-python3.6: IDE for Python (v3.6) using Tkinter

 IDLE is an Integrated Development Environment for Python (v3.6).
 IDLE is written using Tkinter and therefore quite platform-independent.

libpython3.6: Shared Python runtime library (version 3.6)

 Python is a high-level, interactive, object-oriented language. Its 3.6 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.
 .
 This package contains the shared runtime library, normally not needed
 for programs using the statically linked interpreter.

libpython3.6-dbg: Debug Build of the Python Interpreter (version 3.6)

 The package holds two things:
 .
 - Extensions for a Python interpreter configured with --pydebug.
 - Debug information for standard python extensions.
 .
 See the README.debug for more information.

libpython3.6-dev: Header files and a static library for Python (v3.6)

 Header files, a static library and development tools for building
 Python (v3.6) modules, extending the Python interpreter or embedding
 Python (v3.6) in applications.
 .
 Maintainers of Python packages should read README.maintainers.
 .
 This package contains development files. It is normally not
 used on it's own, but as a dependency of python3.6-dev.

libpython3.6-minimal: Minimal subset of the Python language (version 3.6)

 This package contains some essential modules. It is normally not
 used on it's own, but as a dependency of python3.6-minimal.

libpython3.6-stdlib: Interactive high-level object-oriented language (standard library, version 3.6)

 Python is a high-level, interactive, object-oriented language. Its 3.6 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.
 .
 This package contains Python 3.6's standard library. It is normally not
 used on its own, but as a dependency of python3.6.

libpython3.6-testsuite: Testsuite for the Python standard library (v3.6)

 The complete testsuite for the Python standard library. Note that
 a subset is found in the libpython3.6-stdlib package, which should
 be enough for other packages to use (please do not build-depend
 on this package, but file a bug report to include additional
 testsuite files in the libpython3.6-stdlib package).

python3.6: Interactive high-level object-oriented language (version 3.6)

 Python is a high-level, interactive, object-oriented language. Its 3.6 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.

python3.6-dbg: Debug Build of the Python Interpreter (version 3.6)

 The package holds two things:
 .
 - A Python interpreter configured with --pydebug. Dynamically loaded modules
   are searched as <foo>_d.so first. Third party extensions need a separate
   build to be used by this interpreter.
 - Debug information for standard python interpreter and extensions.
 .
 See the README.debug for more information.

python3.6-dev: Header files and a static library for Python (v3.6)

 Header files, a static library and development tools for building
 Python (v3.6) modules, extending the Python interpreter or embedding
 Python (v3.6) in applications.
 .
 Maintainers of Python packages should read README.maintainers.

python3.6-doc: Documentation for the high-level object-oriented language Python (v3.6)

 These is the official set of documentation for the interactive high-level
 object-oriented language Python (v3.6). All documents are provided
 in HTML format. The package consists of ten documents:
 .
   * What's New in Python3.6
   * Tutorial
   * Python Library Reference
   * Macintosh Module Reference
   * Python Language Reference
   * Extending and Embedding Python
   * Python/C API Reference
   * Installing Python Modules
   * Documenting Python
   * Distributing Python Modules

python3.6-examples: Examples for the Python language (v3.6)

 Examples, Demos and Tools for Python (v3.6). These are files included in
 the upstream Python distribution (v3.6).

python3.6-minimal: Minimal subset of the Python language (version 3.6)

 This package contains the interpreter and some essential modules. It can
 be used in the boot process for some basic tasks.
 See /usr/share/doc/python3.6-minimal/README.Debian for a list of the modules
 contained in this package.

python3.6-venv: Interactive high-level object-oriented language (pyvenv binary, version 3.6)

 Python is a high-level, interactive, object-oriented language. Its 3.6 version
 includes an extensive class library with lots of goodies for
 network programming, system administration, sounds and graphics.
 .
 This package contains the pyvenv-3.6 binary.