[Bug 1982108] Re: SRU: update python3.10 to the 3.10.5 release in 22.04 LTS

[Launchpad Bug Tracker]

This bug was fixed in the package python3.10 - 3.10.6-1~22.04

---------------
python3.10 (3.10.6-1~22.04) jammy-proposed; urgency=medium

  * SRU: LP: #1982108: Backport 3.10.6 to 20.04 LTS.

python3.10 (3.10.6-1) unstable; urgency=medium

  * Python 3.10.6 release.

  [ Leonidas Da Silva Barbosa ]
  * SECURITY UPDATE: Injection Attack
    - debian/patches/CVE-2015-20107.patch: Make mailcap refuse to match unsafe
      filenames/types/param in Lib/mailcap.py, Lib/test/test_mailcap.py.
    - CVE-2015-20107

python3.10 (3.10.5-1) unstable; urgency=medium

  * Python 3.10.5 release.
  * Update VCS attributes.

python3.10 (3.10.4-4) unstable; urgency=medium

  * Source-only upload.
  * Backport gh-78214: marshal: Stabilize FLAG_REF usage. Closes: #1010368.

 -- Matthias Klose <doko at ubuntu.com>  Wed, 10 Aug 2022 13:40:04 +0200

** Changed in: python3.10 (Ubuntu Jammy)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2015-20107

** Changed in: python3-defaults (Ubuntu Jammy)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python3.10 in Ubuntu.
https://bugs.launchpad.net/bugs/1982108

Title:
  SRU: update python3.10 to the 3.10.5 release in 22.04 LTS

Status in python3-defaults package in Ubuntu:
  New
Status in python3-stdlib-extensions package in Ubuntu:
  Confirmed
Status in python3.10 package in Ubuntu:
  Confirmed
Status in python3-defaults source package in Jammy:
  Fix Released
Status in python3-stdlib-extensions source package in Jammy:
  Fix Committed
Status in python3.10 source package in Jammy:
  Fix Released

Bug description:
  SRU: update python3.10 to the 3.10.5 release in 22.04 LTS

  we are doing a test rebuild of 22.04 main to check for regressions.

  test rebuilds at
  https://people.canonical.com/~ginggs/ftbfs-report/test-rebuild-20220728-jammy-jammy.html
  https://people.canonical.com/~ginggs/ftbfs-report/test-rebuild-20220728-jammy-gcc-jammy.html

  the first one is the reference test rebuild, the second one the
  rebuild using updated binutils, GCC and python packages.

  Analysis:

  regressions on riscv64 (caused by enabling the tests) are:

  abseil
  adsys
  colord
  dovecot
  glib-networking
  glibc
  gnome-bluetooth3
  gnome-control-center
  google-perftools
  json-glib
  libfprint
  libgdata
  memcached
  mir
  openvswitch
  ovn
  pmdk
  power-profiles-daemon
  strace
  swtpm
  vim

  devscripts is not a regression, introduced by a custom dpkg-
  buildpackage wrapper.

  binutils and python3-stdlib-extensions are superseded which are part
  of the planned updates.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python3-defaults/+bug/1982108/+subscriptions