-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Apr 2026 08:58:00 +0700 Source: python3.11 Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv Architecture: mipsel Version: 3.11.2-6+deb12u7 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Arnaud Rebillout Description: libpython3.11 - Shared Python runtime library (version 3.11) libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11) libpython3.11-dev - Header files and a static library for Python (v3.11) libpython3.11-minimal - Minimal subset of the Python language (version 3.11) libpython3.11-stdlib - Interactive high-level object-oriented language (standard library python3.11 - Interactive high-level object-oriented language (version 3.11) python3.11-dbg - Debug Build of the Python Interpreter (version 3.11) python3.11-dev - Header files and a static library for Python (v3.11) python3.11-full - Python Interpreter with complete class library (version 3.11) python3.11-minimal - Minimal subset of the Python language (version 3.11) python3.11-nopie - Python interpreter linked without PIE (version 3.11) python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.11 (3.11.2-6+deb12u7) bookworm; urgency=medium . * Non-maintainer upload. * Apply upstream patches for the following CVEs: - CVE-2025-4516: issue in bytes.decode("unicode_escape", error="ignore|replace") - CVE-2025-6069: quadratic complexity in html.parser.HTMLParser - CVE-2025-6075: performance degradation in os.path.expandvars() - CVE-2025-8194: infinite loop and deadlock in tarfile - CVE-2025-8291: incorrect ZIP64 End of Central Directory handling - CVE-2025-11468: Folding email comments of unfoldable characters didn't preserve parenthesis which could be abused. - CVE-2025-12084: quadratic complexity in xml.dom.minidom appendChild etc - CVE-2025-13836: OOM or other DoS due to incorrect Content-Length handling in http.client - CVE-2025-13837: OOM or other DoS due to incorrect data size handling in plistlib - CVE-2025-15282: User-controlled data URLs parsed by urllib allowed injecting headers through newlines in the data URL mediatype. - CVE-2026-0672: User-controlled cookie values and parameters could be used to inject HTTP headers into messages. - CVE-2026-0865: User-controlled header names and values containing newlines could be used to inject HTTP headers. - CVE-2026-1299: email module allowed header injection in the BytesGenerator class. Checksums-Sha1: 4ee17dc9c98cf01191b582e9f97799fcddd00364 16406120 libpython3.11-dbg_3.11.2-6+deb12u7_mipsel.deb ca7cc84b6d8c6b6c16dd905b8ff5ece82f82470b 4637432 libpython3.11-dev_3.11.2-6+deb12u7_mipsel.deb 05f715c7cbe2b6ad12636f059603ababd1272ac0 805132 libpython3.11-minimal_3.11.2-6+deb12u7_mipsel.deb 0f27c115f636fd78e042a3a1ea16354fc30f037f 1689572 libpython3.11-stdlib_3.11.2-6+deb12u7_mipsel.deb 9bdfe5ddc780ca9a4a0d13a3cfe26e39642f3adf 1667552 libpython3.11_3.11.2-6+deb12u7_mipsel.deb 4285ae3ac18e60a9ea3ca30e00e8f23e0a068424 35211100 python3.11-dbg_3.11.2-6+deb12u7_mipsel.deb e29826b0b21fdde39b5b61fb136c73ad67964256 500636 python3.11-dev_3.11.2-6+deb12u7_mipsel.deb 375fe218f8d33f3b2fdb7966b66c674463850885 1292 python3.11-full_3.11.2-6+deb12u7_mipsel.deb 3063007a5b787b187324f42f35d12f674549b77d 1680712 python3.11-minimal_3.11.2-6+deb12u7_mipsel.deb a2c06828940d617388d3857f217deecc8e634d0f 1671480 python3.11-nopie_3.11.2-6+deb12u7_mipsel.deb bf611dc8e19c0766dbb76afb55ea1f3f24ca487c 5892 python3.11-venv_3.11.2-6+deb12u7_mipsel.deb 5fc0d1739ebb2821c29577034ff8225ce137488f 13331 python3.11_3.11.2-6+deb12u7_mipsel-buildd.buildinfo 1977875d24dcb3750aae08fe59915292549450f0 573816 python3.11_3.11.2-6+deb12u7_mipsel.deb Checksums-Sha256: dc540a173f095f95b06482c3c18bef250572cb8a8fa4ca2f183ed3832e3bcd4f 16406120 libpython3.11-dbg_3.11.2-6+deb12u7_mipsel.deb 07d1ec27181900e9e49f2f14acee4851b688d4606433135ef21cc8f0bd2c1ac7 4637432 libpython3.11-dev_3.11.2-6+deb12u7_mipsel.deb 42195eb8171fefa853c2af4907bb849716b29c480921bbd8214e6045503c5b5f 805132 libpython3.11-minimal_3.11.2-6+deb12u7_mipsel.deb c4f723774a7822085d60028628c124e124c76c8b473478e206e0f323cda12808 1689572 libpython3.11-stdlib_3.11.2-6+deb12u7_mipsel.deb c159c306833187aa6b21e6db1ad96e662efb69e0c645c7a64b7a52918ea7bf62 1667552 libpython3.11_3.11.2-6+deb12u7_mipsel.deb bd4bcb393b3b48c8b0bde0fd5efbe29a78191a8870f3227f24ba8c7c9faa1e05 35211100 python3.11-dbg_3.11.2-6+deb12u7_mipsel.deb b9cd87186bd5da20b1650c183aecb3775a018d54a9838a95cc89093a760e8314 500636 python3.11-dev_3.11.2-6+deb12u7_mipsel.deb 316804d2e2c1d777c663b57196482d1834e5b7d61f64a04c17f598aeda0a8096 1292 python3.11-full_3.11.2-6+deb12u7_mipsel.deb 43d8244067a9f1f0d1d7a2d1d14553c7cd726242396ef2b7a7a091c4c27efe84 1680712 python3.11-minimal_3.11.2-6+deb12u7_mipsel.deb a4a93bf6ae1908be29c206eb0071a0c1c9e0ea6390933b44e5324bc67cd3ab31 1671480 python3.11-nopie_3.11.2-6+deb12u7_mipsel.deb 03de63b47ec94744b55b23c7450b74915d106e3f037152babdba53f7745b4288 5892 python3.11-venv_3.11.2-6+deb12u7_mipsel.deb 54b73227e639a1d6e2af9fbf32a0f811e0ce3f32e6e282b8c43b8c56978507ac 13331 python3.11_3.11.2-6+deb12u7_mipsel-buildd.buildinfo c76153b844f9da0ba8d06d2409b5b31ba17caf74fada32be7fac16826cd657c3 573816 python3.11_3.11.2-6+deb12u7_mipsel.deb Files: b432b86555edade61b3c290e1b3fe9dd 16406120 debug optional libpython3.11-dbg_3.11.2-6+deb12u7_mipsel.deb a2553b8205a387ffd88ff5ae72e47711 4637432 libdevel optional libpython3.11-dev_3.11.2-6+deb12u7_mipsel.deb e59a143791ebc5c5d3cb3568418ddd03 805132 python optional libpython3.11-minimal_3.11.2-6+deb12u7_mipsel.deb 800936fa19bccdf4af537a3df131a473 1689572 python optional libpython3.11-stdlib_3.11.2-6+deb12u7_mipsel.deb feae5ab2768bde4ff38e11d1b2f33eec 1667552 libs optional libpython3.11_3.11.2-6+deb12u7_mipsel.deb 590cd1b2b8845e8881d525b1dcf11757 35211100 debug optional python3.11-dbg_3.11.2-6+deb12u7_mipsel.deb 27ff8ec72bc7bed613d193e7291652eb 500636 python optional python3.11-dev_3.11.2-6+deb12u7_mipsel.deb e16c030746c8721c6ee1365b42fffcda 1292 python optional python3.11-full_3.11.2-6+deb12u7_mipsel.deb ab218fdd9e3b034866106900a40826f9 1680712 python optional python3.11-minimal_3.11.2-6+deb12u7_mipsel.deb 20e832922d705751433784c7bd2bb533 1671480 python optional python3.11-nopie_3.11.2-6+deb12u7_mipsel.deb 2c63bcba0152fea25512e54cb627b9b9 5892 python optional python3.11-venv_3.11.2-6+deb12u7_mipsel.deb 9f3802753f3a256c7346a6342ce32df1 13331 python optional python3.11_3.11.2-6+deb12u7_mipsel-buildd.buildinfo 7e78dfba9dce3972c5aa4fefd1c92644 573816 python optional python3.11_3.11.2-6+deb12u7_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmn2ed8ACgkQHrk2gTKe Wgi+UQ/+NhTiyEH6oTv6iVJhtvU7ig+pDr5IsEwduS9BxejC3iIGMKpN4n+iJk0c Fr5xrjBZTV1BhuoZCh4CZFQcEblOi99qTYE4xYQOJFR0ZRiBQ9+RocL3lOX8nJRq pt/6jjDzeWYIZuxPaPSR4WE+044tcsyH6xNDuIDll5Xy2lY1/Ystc+retZaq2/XI pZ/d2nqmJbgaG5Cr0eEGchQuB5+usECLej6rQPpFSO/AHf1N/MeamxvXbNn80JAL 98QbUiUhqieA2/Ul0BqItlfdHFKvJh6xugLUqJfh38ZKTjqJSjHzwc5T/1Dpycqq SHkZR2ZAKGI0Z91166515n9qymfRVZEOgYSJlTPLwtK4dBp5VYVtCD7NPC/EVnSG 8arsPQnHOMNRRenyQ6UNk/k/A+v3+TgnHC2ZpYNN9Lzuk2GE4GrgFYmVv6nqHRhc iUXt1B7TTI6VkFdVE+QlLZMNnwE+y1/HAF+GPicn60ciKMuScom5X74YS8UGME/1 96DnihZsGBmgF793G7FT6j00WxBeQQPhLuMueNi+9jI0seh7hGyocsw/6dFO6n3h xpfu4YVMgSbCIxKLuiLKL8gu0kVvEexQzEuBxv+wCHsDNSnQ6EyAypUBeMKFvNfm 2rhrewZyGZqKq9Itp4M377vD25gFJ6aQ0LueACk6R4MDFV2hsuU= =swfL -----END PGP SIGNATURE-----