-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Sep 2024 00:00:30 -0300 Source: python3.11 Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv Architecture: i386 Version: 3.11.2-6+deb12u4 Distribution: bookworm Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Santiago Ruano Rincón Description: libpython3.11 - Shared Python runtime library (version 3.11) libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11) libpython3.11-dev - Header files and a static library for Python (v3.11) libpython3.11-minimal - Minimal subset of the Python language (version 3.11) libpython3.11-stdlib - Interactive high-level object-oriented language (standard library python3.11 - Interactive high-level object-oriented language (version 3.11) python3.11-dbg - Debug Build of the Python Interpreter (version 3.11) python3.11-dev - Header files and a static library for Python (v3.11) python3.11-full - Python Interpreter with complete class library (version 3.11) python3.11-minimal - Minimal subset of the Python language (version 3.11) python3.11-nopie - Python interpreter linked without PIE (version 3.11) python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v Closes: 1080245 Changes: python3.11 (3.11.2-6+deb12u4) bookworm; urgency=medium . * Fix zipfile.Path regression introduced by 3.11.2-6+deb12u3 (Closes: 1080245) * Fix CVE-2024-6232: Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives Checksums-Sha1: 5ad40ede2e4fb1a518b5d24cb1862fdfd46264f8 15664016 libpython3.11-dbg_3.11.2-6+deb12u4_i386.deb 357f42f3ceb65b819931e0e83de3cfc12751bfdb 4904988 libpython3.11-dev_3.11.2-6+deb12u4_i386.deb 31855c70a3d6abfc437ccf52b42fbc09c67771ca 814924 libpython3.11-minimal_3.11.2-6+deb12u4_i386.deb f1735067b2561056dce29669b55dac0515b586b6 1799724 libpython3.11-stdlib_3.11.2-6+deb12u4_i386.deb d6eb035b6ed33dc8697c53dfc95650080f99b92d 2013524 libpython3.11_3.11.2-6+deb12u4_i386.deb b4d2d8e8c1de225b5b0d7885dd5cb025fb6b0ff2 34858336 python3.11-dbg_3.11.2-6+deb12u4_i386.deb 0294cfb30c52e6a161b16b4506e9120a337880e6 615684 python3.11-dev_3.11.2-6+deb12u4_i386.deb 802f4f5df26c5edb07d83b50f924a9a043ad2896 1292 python3.11-full_3.11.2-6+deb12u4_i386.deb cbaf2fa0c945e320b487d58c2bd64f42e6e88551 2129832 python3.11-minimal_3.11.2-6+deb12u4_i386.deb bbeb7a735f407957d524ac7b11fdba7fa0325e37 2119156 python3.11-nopie_3.11.2-6+deb12u4_i386.deb bcc3ffff208c3df8ed61c400c8d5f57283963b64 5896 python3.11-venv_3.11.2-6+deb12u4_i386.deb 7501c740deba0c332aa108a5316e0e4f13cacdac 13332 python3.11_3.11.2-6+deb12u4_i386-buildd.buildinfo 962c7a093d5b41d9aff65808f1c834b5874567f5 573012 python3.11_3.11.2-6+deb12u4_i386.deb Checksums-Sha256: cf8dc95f1fa41e702c575db3a3795684ece7b7836095c30aaa5c59f4644eeb5c 15664016 libpython3.11-dbg_3.11.2-6+deb12u4_i386.deb 188cca176bd31b51d40ca2ceab3bf2cb64c43e117f1e30616a159a3878e10843 4904988 libpython3.11-dev_3.11.2-6+deb12u4_i386.deb a7cc6b10ee8cbeb81a41572d872734ab0b2a6805f1fda26f50223d9c6221594a 814924 libpython3.11-minimal_3.11.2-6+deb12u4_i386.deb 0d652c0b670ee5ae349520714df5aa88645bf7a8a31b527e98d34ab005781231 1799724 libpython3.11-stdlib_3.11.2-6+deb12u4_i386.deb fdf266dba0ce07bc7ff43500c38644f834dd273fa13f4bd90bd493154927d496 2013524 libpython3.11_3.11.2-6+deb12u4_i386.deb 1718f1d16ddac7abaaa14d0fd5f75292538d41ec5110d13c28453401ab7820fc 34858336 python3.11-dbg_3.11.2-6+deb12u4_i386.deb 0d38c794187241e5d4d2d17f9d047e76f01cddc58572c310f86489427d28e165 615684 python3.11-dev_3.11.2-6+deb12u4_i386.deb f90bcac8fae3007e3b82b2a7f6302c2cf3b547801caa7c6871e148d2956c53cd 1292 python3.11-full_3.11.2-6+deb12u4_i386.deb 96ff70623c2e0ed343e18c57a9b6b66036f283a205bd42bfda222a8d8f0c19b0 2129832 python3.11-minimal_3.11.2-6+deb12u4_i386.deb 3e9013af36f3a2ca8bf5184242ea5b5b81d1b0881aecd2c670541f09ba8b7d3a 2119156 python3.11-nopie_3.11.2-6+deb12u4_i386.deb 2ccd723f48a8796db31f2802b907ad5e2fe6274bcf95e7b8a7a699ee4c5920a3 5896 python3.11-venv_3.11.2-6+deb12u4_i386.deb 7a43bf6ec2f52012440bc395f18d5894e69e1fb705c728c406088a4618f1194a 13332 python3.11_3.11.2-6+deb12u4_i386-buildd.buildinfo 6dcf0d11f249a818d6dd304c7c46dfef8924943f9fe3bec69fd7aed4fc0744a5 573012 python3.11_3.11.2-6+deb12u4_i386.deb Files: d7a43eed40474dd9eb11576e611b0b4f 15664016 debug optional libpython3.11-dbg_3.11.2-6+deb12u4_i386.deb 68df3b6e341e5a93ab93d0f4b6c1c087 4904988 libdevel optional libpython3.11-dev_3.11.2-6+deb12u4_i386.deb 27a68cc205c2c5075512d889e32ded0f 814924 python optional libpython3.11-minimal_3.11.2-6+deb12u4_i386.deb 0e92b3a3f7f9cb59b7770aeb2dbb7066 1799724 python optional libpython3.11-stdlib_3.11.2-6+deb12u4_i386.deb 80f2af11778b3bdb349f693fe4cb303e 2013524 libs optional libpython3.11_3.11.2-6+deb12u4_i386.deb ae6f7a1a785e49ba78061675b538871b 34858336 debug optional python3.11-dbg_3.11.2-6+deb12u4_i386.deb 567a312b4c34f525fee015cec36e5130 615684 python optional python3.11-dev_3.11.2-6+deb12u4_i386.deb 1baf56f49b53660a25b4f8c5868555d0 1292 python optional python3.11-full_3.11.2-6+deb12u4_i386.deb 859708670e81b54d83c4c85e43304e91 2129832 python optional python3.11-minimal_3.11.2-6+deb12u4_i386.deb fa32b960c58e2d2d61daef4cf59105ad 2119156 python optional python3.11-nopie_3.11.2-6+deb12u4_i386.deb b337749bc664eb62b66e33e1a962f2f3 5896 python optional python3.11-venv_3.11.2-6+deb12u4_i386.deb 81fbd78405c22b5cb486393b8f163739 13332 python optional python3.11_3.11.2-6+deb12u4_i386-buildd.buildinfo 33e4b09010278f69bf297abb10d84467 573012 python optional python3.11_3.11.2-6+deb12u4_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGBeuno8wiDXCewDuqqLQG5ksqMMFAmcIKJEACgkQqqLQG5ks qMNPkA//VcRPeKc46fIgyU6sB9jqBxRXKPPTqHW7lwQMmM3i8E2LmhwYaOIi6IW1 NNVHcXJxma2r2FfTAvG2KFQz3lRftn706an1VuJAi5lCtYxkfdYxVXba7N22LDXG pJsvjpdGzquMxqdwKEAwU2XvtsESbcvngsFUERaaAQ7vHbHC7o83oCfOobgK4Ydu VBkRvp0ufwmc/LvttZxPQuQazS27PDJ9S+OgAh9kwOyC0VcFkTAE7r4xxlq+PgEb B0N2bBYM34WbOdbHCZEBxuNdKD0nDeYiS1WzDcvLYhFoexAHMonbHyY222z5dnxM GbEvGqKf9Vj4awqN9QqrV2DTm1kHHEBxoJDwNKYWl4TrlqjF6JDfjUFbwAVcRrde nWlFylbvNaMbHnkeWMtRMYePo4CeTkYNrycIydrQ4QFLv6oo26s9NpFjN/N6/40X tLD2fvxWPMH5BPZuq9xkcPt16+nFPYzQKZQiqX6GsxFdgqIg/pGx0yVPo5vaeD62 HGQLdCvXR0kpV7jVhbAk7Xci1Wum9NKQByRzd1iA4u89K6A/w4qNZqmmxi9F/kal ucSsb4RuEA1LExp3esw/t4Cym12EseG4ISoHz3UUBQ0tBM2DpwCEnX+E32ggVBwH GhNejLmrslvP88/eeEMwhuu1Mo78rHXHqpj9l93FjXlFf97B0wM= =vc2p -----END PGP SIGNATURE-----