-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Apr 2026 08:58:00 +0700 Source: python3.11 Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv Architecture: mips64el Version: 3.11.2-6+deb12u7 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Arnaud Rebillout Description: libpython3.11 - Shared Python runtime library (version 3.11) libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11) libpython3.11-dev - Header files and a static library for Python (v3.11) libpython3.11-minimal - Minimal subset of the Python language (version 3.11) libpython3.11-stdlib - Interactive high-level object-oriented language (standard library python3.11 - Interactive high-level object-oriented language (version 3.11) python3.11-dbg - Debug Build of the Python Interpreter (version 3.11) python3.11-dev - Header files and a static library for Python (v3.11) python3.11-full - Python Interpreter with complete class library (version 3.11) python3.11-minimal - Minimal subset of the Python language (version 3.11) python3.11-nopie - Python interpreter linked without PIE (version 3.11) python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.11 (3.11.2-6+deb12u7) bookworm; urgency=medium . * Non-maintainer upload. * Apply upstream patches for the following CVEs: - CVE-2025-4516: issue in bytes.decode("unicode_escape", error="ignore|replace") - CVE-2025-6069: quadratic complexity in html.parser.HTMLParser - CVE-2025-6075: performance degradation in os.path.expandvars() - CVE-2025-8194: infinite loop and deadlock in tarfile - CVE-2025-8291: incorrect ZIP64 End of Central Directory handling - CVE-2025-11468: Folding email comments of unfoldable characters didn't preserve parenthesis which could be abused. - CVE-2025-12084: quadratic complexity in xml.dom.minidom appendChild etc - CVE-2025-13836: OOM or other DoS due to incorrect Content-Length handling in http.client - CVE-2025-13837: OOM or other DoS due to incorrect data size handling in plistlib - CVE-2025-15282: User-controlled data URLs parsed by urllib allowed injecting headers through newlines in the data URL mediatype. - CVE-2026-0672: User-controlled cookie values and parameters could be used to inject HTTP headers into messages. - CVE-2026-0865: User-controlled header names and values containing newlines could be used to inject HTTP headers. - CVE-2026-1299: email module allowed header injection in the BytesGenerator class. Checksums-Sha1: a9e3bef4529ac8549d402d40d3347ffbee8adbc3 16725116 libpython3.11-dbg_3.11.2-6+deb12u7_mips64el.deb 7ff1c70fef61d7c2d2c94f5f4a26bde3043e1341 4714720 libpython3.11-dev_3.11.2-6+deb12u7_mips64el.deb 362369066c87f3943778f79cf8400876ffa57fa3 805224 libpython3.11-minimal_3.11.2-6+deb12u7_mips64el.deb ba405d3c6ded359fa9557ae09049e176785fe7f0 1708096 libpython3.11-stdlib_3.11.2-6+deb12u7_mips64el.deb 51ae3bdb4be542aa53442a6c73d29e15cc69f89f 1652228 libpython3.11_3.11.2-6+deb12u7_mips64el.deb 804687e8771d6ac7f02d331dce7566fea6cd23f6 35922352 python3.11-dbg_3.11.2-6+deb12u7_mips64el.deb a4c54486a39f45b314ff5e62930e02b50c0c84f5 500648 python3.11-dev_3.11.2-6+deb12u7_mips64el.deb 1ecdb3d7dd35164cb7a15e1a8b369e84cd1efa6d 1292 python3.11-full_3.11.2-6+deb12u7_mips64el.deb 0204cea7550fa6e31ff94155e8472344b5f6bf6e 1665440 python3.11-minimal_3.11.2-6+deb12u7_mips64el.deb 1c5355af6714a0b427a19419c11e48e08cecc672 1655276 python3.11-nopie_3.11.2-6+deb12u7_mips64el.deb db74af50a9355695848f3eecd8d06c3835d1706a 5896 python3.11-venv_3.11.2-6+deb12u7_mips64el.deb 0faf30a011c65786fa1ab797ba5eac3a74a692f1 13472 python3.11_3.11.2-6+deb12u7_mips64el-buildd.buildinfo 812d6a32132172cece5f063e13b6a6a1179b03c3 573820 python3.11_3.11.2-6+deb12u7_mips64el.deb Checksums-Sha256: ebb4df80e05615640763a24ae2f9a30fa8716b4f001ff161bdf353d472e6067f 16725116 libpython3.11-dbg_3.11.2-6+deb12u7_mips64el.deb 862874511dc8f6884cde9422afdfd048e91e404910560694b2ce89a661222946 4714720 libpython3.11-dev_3.11.2-6+deb12u7_mips64el.deb a6f23081d482e0ff6e0f93a90a51b2ab8daaab438c25ca0da848c35fa70df0d5 805224 libpython3.11-minimal_3.11.2-6+deb12u7_mips64el.deb 4c95b24394125631235b2ca063f359247bc68bb6797e19eff4b2c277b78ef1f5 1708096 libpython3.11-stdlib_3.11.2-6+deb12u7_mips64el.deb ed12a281ff61168446ff48bb43ec47a10f884779c1d5651a1fc221ea4691fc99 1652228 libpython3.11_3.11.2-6+deb12u7_mips64el.deb cd27fe3d6af0b803802cfc9761b98ca5733387939ea02fc712aab257ad94eae8 35922352 python3.11-dbg_3.11.2-6+deb12u7_mips64el.deb 3e7115c90f052c2e9e15f9b6919dfec187b4a9a0364e8574ba6cbae162b2f1b3 500648 python3.11-dev_3.11.2-6+deb12u7_mips64el.deb 01fe66330fe68aecfd06145f826bff95aa43599c2b3f86c9916c18d38718fa69 1292 python3.11-full_3.11.2-6+deb12u7_mips64el.deb 730196cfe68570b5f6a2b926f844a55bdd759970504ab85daf6d3af6ad291df3 1665440 python3.11-minimal_3.11.2-6+deb12u7_mips64el.deb 9254f4e85de12cca51027fe656c1bc24fe2b5d1742d1456d68332f1a0376b84c 1655276 python3.11-nopie_3.11.2-6+deb12u7_mips64el.deb 077d5b58a20be4935edd34e71234db9827ec7357cc542641ce61776c8a500a0e 5896 python3.11-venv_3.11.2-6+deb12u7_mips64el.deb 153b464a2f476d8f238debf4e15d19a805df31103570c1680ade197d62cfab14 13472 python3.11_3.11.2-6+deb12u7_mips64el-buildd.buildinfo 359ccfb3dacea2af2182175666d443400716ed2afe12d1573a1165f773d0a1d4 573820 python3.11_3.11.2-6+deb12u7_mips64el.deb Files: 134cb128659631791a4b8600a393c472 16725116 debug optional libpython3.11-dbg_3.11.2-6+deb12u7_mips64el.deb 9a82cc53e94a19e16e0dc0e86c398ce3 4714720 libdevel optional libpython3.11-dev_3.11.2-6+deb12u7_mips64el.deb 387324d66fd119744aeb00cc8a747313 805224 python optional libpython3.11-minimal_3.11.2-6+deb12u7_mips64el.deb 9d9f3c59454b7214d91ada83232bba5f 1708096 python optional libpython3.11-stdlib_3.11.2-6+deb12u7_mips64el.deb 939534e5921ac87a82ec7647768e5118 1652228 libs optional libpython3.11_3.11.2-6+deb12u7_mips64el.deb f4ec0c65badf8b9bdef56931a6da5ad4 35922352 debug optional python3.11-dbg_3.11.2-6+deb12u7_mips64el.deb ff13de3f5c634d299f8a2b1ce4362c68 500648 python optional python3.11-dev_3.11.2-6+deb12u7_mips64el.deb 22a5086909f3fb46b8b11e65d148dd7b 1292 python optional python3.11-full_3.11.2-6+deb12u7_mips64el.deb 580241e2b2bcb73e4d7c6f29131555c7 1665440 python optional python3.11-minimal_3.11.2-6+deb12u7_mips64el.deb 6362784c52f67040d58604277dbd4c26 1655276 python optional python3.11-nopie_3.11.2-6+deb12u7_mips64el.deb e36a4784647951786575748b6a21153a 5896 python optional python3.11-venv_3.11.2-6+deb12u7_mips64el.deb 815965908eb72766aa66e11793c96f19 13472 python optional python3.11_3.11.2-6+deb12u7_mips64el-buildd.buildinfo 2f9aa14a658e1ce2b5c16082dbaed165 573820 python optional python3.11_3.11.2-6+deb12u7_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmn2fHYACgkQ/qmHKZss fSAT+hAA9Zo1BFq5fMaf1SDYsluv3BTbCMw4VsLGbVS/CWD7M8hbU78TQmNPdFLN JuRTvH8FCJSQ5itXAsWTWafN+uMCWelh4PfxJQ2oEzwoqosx+nT5JPgQrfpaQELP XssIu7c2WcdZWyfdUv+gPfEtEkFDa/APaMEcnVIpxdwH9ySLVbqE+w/yMyG9OpaX Z8SFSjkRFZluT8XNru+pyis+/RXWrozo9DP7tbb7/GHjEk9SA6G6anK0Wz30Qir0 mpPEovEX93my6Ls4MwvuwLOVoJluqZLnUQIyqprjLhFIsgZXBe2Y/0+W1aIwYXw3 1pb68S49iKAofRBEgXx5cNim4H2JS16BH7udHYgIYB+Rsa8Cb9v0v4inlC1AoXbX Z+nPzIvEY7zXr2S78DNUCDVSRJZNOVBadRZMInSfZgozlvU/Ene4zprM3Wr+O53V cG6Y5x4S5eIQlLHq4WtK6taZQqgleWdKhMAoY4SwOBC442eIylTT+7xaDIseAsgq S2AVxAmM6D0zi3tmDZjCpAP49RKNWSDekY11ePDZE16SDW+1QS3KGM4glIzXM472 zK/8Wfe79Cy3k7rGEDh7bI+9M8WLZRGYFpPuNFlnPqZ9CT8tUnx5DyVMw67iZ3g7 qiTTuOKEsMtvACuqPwyHPos+tmGs/n5cQMWDMirQEyVWyxUrUdg= =1tz9 -----END PGP SIGNATURE-----