Accepted python-babel 2.3.4+dfsg.1-2+deb9u1 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 21 Oct 2021 09:37:01 +0200
Source: python-babel
Binary: python-babel python3-babel python-babel-localedata python-babel-doc
Architecture: source
Version: 2.3.4+dfsg.1-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>
Changed-By: Sylvain Beucler <beuc@debian.org>
Description:
python-babel - tools for internationalizing Python applications - Python 2.x
python-babel-doc - tools for internationalizing Python applications - documentation
python-babel-localedata - tools for internationalizing Python applications - locale data fi
python3-babel - tools for internationalizing Python applications - Python 3.x
Closes: 987824
Changes:
python-babel (2.3.4+dfsg.1-2+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
.
[ Abhijith PA ]
* CVE-2021-20095/CVE-2021-42771: Babel.Locale allows attackers to load
arbitrary locale .dat files (containing serialized Python objects) via
directory traversal, leading to code execution. (Closes: #987824)
.
[ Sylvain Beucler ]
* Fix test suite in summer time zones
Checksums-Sha1:
94a3cf688db177a7a633b3fe7e01fef17c42cc24 2496 python-babel_2.3.4+dfsg.1-2+deb9u1.dsc
f8c609f3bf00784618ed2f2a6a98f66a21a0e5fa 6228472 python-babel_2.3.4+dfsg.1.orig.tar.xz
467e3636fe0ba6e2aad5fe4d6b9f21076195ebaa 11028 python-babel_2.3.4+dfsg.1-2+deb9u1.debian.tar.xz
71896598b2698d0ba006d902605239761fa02054 7346 python-babel_2.3.4+dfsg.1-2+deb9u1_source.buildinfo
Checksums-Sha256:
efd49bb118b6267514f255d98d65127ecf4af3ad4815007d55ecab2f3d25760f 2496 python-babel_2.3.4+dfsg.1-2+deb9u1.dsc
38db2e5112d0e642d275496b731c7a25715e91adf11dd3681744753003866d8c 6228472 python-babel_2.3.4+dfsg.1.orig.tar.xz
5e0f66eb2d15d98f6ab7d20eacfec1cd4b444afee71b4b4f84a10ad84345c2af 11028 python-babel_2.3.4+dfsg.1-2+deb9u1.debian.tar.xz
4fb1a94d783cba2bd4980bb8d20340ef50347f212ac34608c2af004fd25e0276 7346 python-babel_2.3.4+dfsg.1-2+deb9u1_source.buildinfo
Files:
397220bbc925c6181e11437c1927171d 2496 python optional python-babel_2.3.4+dfsg.1-2+deb9u1.dsc
778d8f6a99ccb987f993be3f2075f8c5 6228472 python optional python-babel_2.3.4+dfsg.1.orig.tar.xz
054bb5146ba8ca4343be9bcadcae7275 11028 python optional python-babel_2.3.4+dfsg.1-2+deb9u1.debian.tar.xz
a82ecb7794edc984fa837f61ea1c7d0c 7346 python optional python-babel_2.3.4+dfsg.1-2+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEE1vEOfV7HXWKqBieIDTl9HeUlXjAFAmFxJMQACgkQDTl9HeUl
XjBPyA/7B8ILgd4qc0pmKkGQRLevs+O0RU+AW7RlIGcMyD7hUO0n89jQBHDTW2bI
zkCGvgN607WbOpb6sVmq40MV+Ti1xihVK9yqorju3AQcdEI88rwLDYyo7o3olRgt
rkdCV7Zax/cmPb3qF7e+Ye26wUfxWPuw+a3ynXvHL/vimCJVOgVozTJmHbpnMsZr
luR+GszvEnKFH3ldHoiqK5VrTfD2qAXJaEWRWbGlzmWc+YzYYLyS8AfX2vOkhnK8
AeJ1iMNOJ0HLyYR+GB31UUIjeXWig0FlEbIFeD2twUjOT+LsyIQpt6kcu8Gb73X5
rQ+CDvWbjYfSDkG2WNj2ydJqs30PjE4QjHizlrdPGH4MKB6CifPp5qFTFSbsSLfk
wdILyQHh3jfsCpksuaZ9vXw0po8d2f8TUALWNupUM7SfrhMsi+yoeMsW8rmfAAtI
ixLwOmje18zglnL9AeiWG2OerwhYqeha8smmU7m9+tGGcvthgR/EqRFnAPXNBLr9
2+8KgbtJdFE/V4NmkaIaGYchlsBsXZXiAYBNPxXonLXoW9a4iIUdi4+jjhExLYtv
Q+TaC6kcmkAUjTi9uHTSsh3yMRsUZ0bSCsRODIDOiH0FdcnePIZgPNDM7YJizdJ5
rAc652ZzQIVkKRmKAB3UO2vsrT1kupWZ90P/tm3E1V9zaQD0kOg=
=5w2q
-----END PGP SIGNATURE-----