-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 May 2026 12:17:27 +0700
Source: python3.11
Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv
Architecture: i386
Version: 3.11.2-6+deb12u8
Distribution: bookworm
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Description:
 libpython3.11 - Shared Python runtime library (version 3.11)
 libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 libpython3.11-dev - Header files and a static library for Python (v3.11)
 libpython3.11-minimal - Minimal subset of the Python language (version 3.11)
 libpython3.11-stdlib - Interactive high-level object-oriented language (standard library
 python3.11 - Interactive high-level object-oriented language (version 3.11)
 python3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 python3.11-dev - Header files and a static library for Python (v3.11)
 python3.11-full - Python Interpreter with complete class library (version 3.11)
 python3.11-minimal - Minimal subset of the Python language (version 3.11)
 python3.11-nopie - Python interpreter linked without PIE (version 3.11)
 python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v
Changes:
 python3.11 (3.11.2-6+deb12u8) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Apply upstream patches for the following CVEs:
     - CVE-2025-13462: Incorrect parsing of TarInfo header when GNU long name
       and type AREGTYPE are combined
     - CVE-2026-2297: SourcelessFileLoader does not use io.open_code()
     - CVE-2026-3644: Reject control characters in more places in
       http.cookies.Morsel (follow-up of patch for CVE-2026-0672)
     - CVE-2026-4224: pyexpat.c: Unbounded C recursion in conv_content_model
       causes crash
     - CVE-2026-4519: Reject leading dashes in webbrowser.open()
     - CVE-2026-6100: Possible UAF in {LZMA,BZ2}Decompressor
   * Add patch to skip some failing XML tests. Failure is due to the fact that
     we build / tests against expat/2.5.0-1+deb12u2, which was patched for
     CVE-2023-52425, and that broke some tests. See the patch itself for more
     details.
Checksums-Sha1:
 698cbb1a3947e10e0ee84a03cd1920dd4106bf2d 15684004 libpython3.11-dbg_3.11.2-6+deb12u8_i386.deb
 b434940033c1ed7c0c2ab58e4a0eb5af6e42e82a 4912528 libpython3.11-dev_3.11.2-6+deb12u8_i386.deb
 33cd081be3197c8a8897e6ef8ee281630e7d1f5d 818108 libpython3.11-minimal_3.11.2-6+deb12u8_i386.deb
 5cf430164a50afa529481ca97fff8fe99178ef9d 1799036 libpython3.11-stdlib_3.11.2-6+deb12u8_i386.deb
 2b587ecfd4748a1ea1b1a0ce377c21c60d600586 2013072 libpython3.11_3.11.2-6+deb12u8_i386.deb
 ce7cb1c1c708cc798d26f6fa1bef6b83f4fdd032 34931032 python3.11-dbg_3.11.2-6+deb12u8_i386.deb
 b9d0c8fc7abd1e0e1c86656e54a590d84df1c369 619348 python3.11-dev_3.11.2-6+deb12u8_i386.deb
 f49589efba89911629ef54cd70baeff2ece279c7 1288 python3.11-full_3.11.2-6+deb12u8_i386.deb
 f6cfc05f1da4f7f799807e928a72600be2ab079b 2131184 python3.11-minimal_3.11.2-6+deb12u8_i386.deb
 b9288f7fdbac5a744e61d98c00929e97dbbc28b4 2121180 python3.11-nopie_3.11.2-6+deb12u8_i386.deb
 d84e7546591565540fd963b1832fa06c1259d419 5888 python3.11-venv_3.11.2-6+deb12u8_i386.deb
 3033539bc74dce9a27701cc1f866f9cb009fcfd1 13540 python3.11_3.11.2-6+deb12u8_i386-buildd.buildinfo
 06cbe4127b1c467654b281e31ed514b82d43a43d 574236 python3.11_3.11.2-6+deb12u8_i386.deb
Checksums-Sha256:
 e7ee04dd4beb6b54eb4a7bffb008a9b0fa8313358d7258648ce072b6b7515d0e 15684004 libpython3.11-dbg_3.11.2-6+deb12u8_i386.deb
 e069081c318c5288ae13949fc98441e7323868d8c07a53f921c488a441692570 4912528 libpython3.11-dev_3.11.2-6+deb12u8_i386.deb
 306a8ea53e09eee11168b4f482dd5fb6af68a2ba76ec757ef6317329658aa8c6 818108 libpython3.11-minimal_3.11.2-6+deb12u8_i386.deb
 5c38a48d9e63eabaab851fc00f6a2c838960f0bd25187a2da4ca0a510cc98a3f 1799036 libpython3.11-stdlib_3.11.2-6+deb12u8_i386.deb
 b980125288f4f4f10ce46929e3703834cf95f063be98c15f176eac40aeec45bf 2013072 libpython3.11_3.11.2-6+deb12u8_i386.deb
 2e3777e5b7e27c34dda0ac876c4773926efcb578368e194068c250ce5beea28b 34931032 python3.11-dbg_3.11.2-6+deb12u8_i386.deb
 019a30f288ea46f46fd005c1f3a3e78e762feb8ee6b6b80ec69663c67cf95015 619348 python3.11-dev_3.11.2-6+deb12u8_i386.deb
 95fe491be442f685586e87c71a5c83ae68bd232bae81535bba1be0537808953f 1288 python3.11-full_3.11.2-6+deb12u8_i386.deb
 fdd91419e5e70ecbc7f732f9fb1246e7395bc9ba7df03ef00e93f6a75a0b8a11 2131184 python3.11-minimal_3.11.2-6+deb12u8_i386.deb
 925131fd75c514c9150c7afbd307d50fc274c3d9d1068ecfc8a19e460a421571 2121180 python3.11-nopie_3.11.2-6+deb12u8_i386.deb
 1f38d0df60dba33f8ee4c9e90f7a8a20929d3aaef3d1a2ef1b48d4e268adfe84 5888 python3.11-venv_3.11.2-6+deb12u8_i386.deb
 db94d4d4e1dcedf3c28191216b00321333bdeae6d0221e4785cd1c8b0f9ec422 13540 python3.11_3.11.2-6+deb12u8_i386-buildd.buildinfo
 84460b5f95b3e604794ff2da0fe6ccfe90998a7f2f7f3fc75d86df400c201b60 574236 python3.11_3.11.2-6+deb12u8_i386.deb
Files:
 eb5e2e7229218258779adb8ab29da6d9 15684004 debug optional libpython3.11-dbg_3.11.2-6+deb12u8_i386.deb
 a2126c4f397b00f7a75f1f1319afd5b3 4912528 libdevel optional libpython3.11-dev_3.11.2-6+deb12u8_i386.deb
 3f8a3e7582bb0c741b3c11e3062ec098 818108 python optional libpython3.11-minimal_3.11.2-6+deb12u8_i386.deb
 7c052fb045a54f070e4308d9a30327da 1799036 python optional libpython3.11-stdlib_3.11.2-6+deb12u8_i386.deb
 83787ee01d4bdbb1b1fd2fbb0f30d333 2013072 libs optional libpython3.11_3.11.2-6+deb12u8_i386.deb
 2e4dc8c0e09fc4c413453c2a5a35f383 34931032 debug optional python3.11-dbg_3.11.2-6+deb12u8_i386.deb
 90025c728b73e2c88beaeabc4856ee22 619348 python optional python3.11-dev_3.11.2-6+deb12u8_i386.deb
 ce463a52eb1c96693b3488c18650be93 1288 python optional python3.11-full_3.11.2-6+deb12u8_i386.deb
 6725b81930601abc1c9cf21deb64bdc3 2131184 python optional python3.11-minimal_3.11.2-6+deb12u8_i386.deb
 021994c512644b6bfd2d635bd46a24fc 2121180 python optional python3.11-nopie_3.11.2-6+deb12u8_i386.deb
 4ee00d3d7656c4c0d471155bf7782136 5888 python optional python3.11-venv_3.11.2-6+deb12u8_i386.deb
 a33e62c4467a4b205adca4fe20ef1b5b 13540 python optional python3.11_3.11.2-6+deb12u8_i386-buildd.buildinfo
 8b0d2205deae869c4b1330e7ac6dfd45 574236 python optional python3.11_3.11.2-6+deb12u8_i386.deb

-----BEGIN PGP SIGNATURE-----
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=c3lG
-----END PGP SIGNATURE-----