This bug was fixed in the package python3.10 - 3.10.6-1~22.04
---------------
python3.10 (3.10.6-1~22.04) jammy-proposed; urgency=medium
* SRU: LP: #1982108: Backport 3.10.6 to 20.04 LTS.
python3.10 (3.10.6-1) unstable; urgency=medium
* Python 3.10.6 release.
[ Leonidas Da Silva Barbosa ]
* SECURITY UPDATE: Injection Attack
- debian/patches/CVE-2015-20107.patch: Make mailcap refuse to match unsafe
filenames/types/param in Lib/mailcap.py, Lib/test/test_mailcap.py.
- CVE-2015-20107
python3.10 (3.10.5-1) unstable; urgency=medium
* Python 3.10.5 release.
* Update VCS attributes.
python3.10 (3.10.4-4) unstable; urgency=medium
* Source-only upload.
* Backport gh-78214: marshal: Stabilize FLAG_REF usage. Closes: #1010368.
-- Matthias Klose <d...@ubuntu.com> Wed, 10 Aug 2022 13:40:04 +0200
** Changed in: python3.10 (Ubuntu Jammy)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2015-20107
** Changed in: python3-defaults (Ubuntu Jammy)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to python3-defaults in
Ubuntu.
https://bugs.launchpad.net/bugs/1982108
Title:
SRU: update python3.10 to the 3.10.5 release in 22.04 LTS
Status in python3-defaults package in Ubuntu:
New
Status in python3-stdlib-extensions package in Ubuntu:
Confirmed
Status in python3.10 package in Ubuntu:
Confirmed
Status in python3-defaults source package in Jammy:
Fix Released
Status in python3-stdlib-extensions source package in Jammy:
Fix Committed
Status in python3.10 source package in Jammy:
Fix Released
Bug description:
SRU: update python3.10 to the 3.10.5 release in 22.04 LTS
we are doing a test rebuild of 22.04 main to check for regressions.
test rebuilds at
https://people.canonical.com/~ginggs/ftbfs-report/test-rebuild-20220728-jammy-jammy.html
https://people.canonical.com/~ginggs/ftbfs-report/test-rebuild-20220728-jammy-gcc-jammy.html
the first one is the reference test rebuild, the second one the
rebuild using updated binutils, GCC and python packages.
Analysis:
regressions on riscv64 (caused by enabling the tests) are:
abseil
adsys
colord
dovecot
glib-networking
glibc
gnome-bluetooth3
gnome-control-center
google-perftools
json-glib
libfprint
libgdata
memcached
mir
openvswitch
ovn
pmdk
power-profiles-daemon
strace
swtpm
vim
devscripts is not a regression, introduced by a custom dpkg-
buildpackage wrapper.
binutils and python3-stdlib-extensions are superseded which are part
of the planned updates.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python3-defaults/+bug/1982108/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
