[ubuntu/focal-proposed] python-psutil 5.5.1-1ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Fri Nov 22 16:08:13 UTC 2019


python-psutil (5.5.1-1ubuntu1) focal; urgency=medium

  * SECURITY UPDATE: double-free via refcount mishandling
    - debian/patches/CVE-2019-18874-1.patch: use Py_CLEAR instead of
      Py_DECREF in psutil/_psutil_linux.c.
    - debian/patches/CVE-2019-18874-2.patch: use Py_CLEAR instead of
      Py_DECREF in psutil/_psutil_posix.c.
    - CVE-2019-18874

Date: Fri, 22 Nov 2019 10:37:48 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/python-psutil/5.5.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 22 Nov 2019 10:37:48 -0500
Source: python-psutil
Architecture: source
Version: 5.5.1-1ubuntu1
Distribution: focal
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 python-psutil (5.5.1-1ubuntu1) focal; urgency=medium
 .
   * SECURITY UPDATE: double-free via refcount mishandling
     - debian/patches/CVE-2019-18874-1.patch: use Py_CLEAR instead of
       Py_DECREF in psutil/_psutil_linux.c.
     - debian/patches/CVE-2019-18874-2.patch: use Py_CLEAR instead of
       Py_DECREF in psutil/_psutil_posix.c.
     - CVE-2019-18874
Checksums-Sha1:
 91a8ac091092032cb02bd33cac3bbff5211d43f5 2562 python-psutil_5.5.1-1ubuntu1.dsc
 b51c69bba6cf9c8728671c314c2a1b6bbb99b513 7496 python-psutil_5.5.1-1ubuntu1.debian.tar.xz
 e8690a932a4fb690fcf17b2d7a83ca0944f0d597 9393 python-psutil_5.5.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
 932d1b271e312b99cb4e64cd782b88020fc2d6dc941b16fab1b52237603fd563 2562 python-psutil_5.5.1-1ubuntu1.dsc
 acb28ff1c41ec2af32914e57525e0386ded71214200163149acfa789bfb51d63 7496 python-psutil_5.5.1-1ubuntu1.debian.tar.xz
 682ba1b614b226755872ff117fede1e6235cefa12f087ec31d771f4a59b941d2 9393 python-psutil_5.5.1-1ubuntu1_source.buildinfo
Files:
 d3da27622ce50dc8c05e0958c91a06c7 2562 python optional python-psutil_5.5.1-1ubuntu1.dsc
 8178d5c4837b59812a0e9f3fc9aa9f32 7496 python optional python-psutil_5.5.1-1ubuntu1.debian.tar.xz
 cc9c6216c8c359233fee92b0d50594c1 9393 python optional python-psutil_5.5.1-1ubuntu1_source.buildinfo
Original-Maintainer: Sandro Tosi <morph at debian.org>

-----BEGIN PGP SIGNATURE-----
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=tXlP
-----END PGP SIGNATURE-----


More information about the Focal-changes mailing list