-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 14 Sep 2024 00:00:30 -0300 Source: python3.11 Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv Architecture: amd64 Version: 3.11.2-6+deb12u4 Distribution: bookworm Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Santiago Ruano Rincón Description: libpython3.11 - Shared Python runtime library (version 3.11) libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11) libpython3.11-dev - Header files and a static library for Python (v3.11) libpython3.11-minimal - Minimal subset of the Python language (version 3.11) libpython3.11-stdlib - Interactive high-level object-oriented language (standard library python3.11 - Interactive high-level object-oriented language (version 3.11) python3.11-dbg - Debug Build of the Python Interpreter (version 3.11) python3.11-dev - Header files and a static library for Python (v3.11) python3.11-full - Python Interpreter with complete class library (version 3.11) python3.11-minimal - Minimal subset of the Python language (version 3.11) python3.11-nopie - Python interpreter linked without PIE (version 3.11) python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v Closes: 1080245 Changes: python3.11 (3.11.2-6+deb12u4) bookworm; urgency=medium . * Fix zipfile.Path regression introduced by 3.11.2-6+deb12u3 (Closes: 1080245) * Fix CVE-2024-6232: Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives Checksums-Sha1: afa63a698c3e46ce119858e72d63753ec0ff79e9 16786276 libpython3.11-dbg_3.11.2-6+deb12u4_amd64.deb 307753a519230a598ce6655c2f345e99b4d0b504 4738300 libpython3.11-dev_3.11.2-6+deb12u4_amd64.deb 96d325eca20339bcdb7a7d93ade3342d4ec3ea17 814592 libpython3.11-minimal_3.11.2-6+deb12u4_amd64.deb 3d643f7e7c7621b052a5c8a6236fbba448d8d9ed 1796752 libpython3.11-stdlib_3.11.2-6+deb12u4_amd64.deb 91bee8076e86e042c70155c781acf4db869e54f6 1988556 libpython3.11_3.11.2-6+deb12u4_amd64.deb f7a4853b191b6c2d6d84e933686f08284d5c0339 36953448 python3.11-dbg_3.11.2-6+deb12u4_amd64.deb 44756bff7f35de7ee28c7efdc53a3542520be6b7 615696 python3.11-dev_3.11.2-6+deb12u4_amd64.deb f47ef722a15367445e17bd7f172796856525d145 1292 python3.11-full_3.11.2-6+deb12u4_amd64.deb 12fdbeaea06551bf6f8c04c431bee4efa77dd42b 2065936 python3.11-minimal_3.11.2-6+deb12u4_amd64.deb 4e30cc8ed8241797c87fe3052ccbc940eb9179cc 2054620 python3.11-nopie_3.11.2-6+deb12u4_amd64.deb 9bd2567064d1c2d9f3999bd2ea87a261d1c108e1 5896 python3.11-venv_3.11.2-6+deb12u4_amd64.deb ec0ae883862e4031f45020a21044dcf93f78fbe4 13422 python3.11_3.11.2-6+deb12u4_amd64-buildd.buildinfo f371ce5f96e9dd3a350a2186bcf9e767e592ea6c 573012 python3.11_3.11.2-6+deb12u4_amd64.deb Checksums-Sha256: 1ee20db92196d50351783741e36333b950a7fb5530fb761c9173621851d8d138 16786276 libpython3.11-dbg_3.11.2-6+deb12u4_amd64.deb f2a285a8a5240ed00c0c5be9cc8a4e821865a84d61825ee102a4db69ff8c310b 4738300 libpython3.11-dev_3.11.2-6+deb12u4_amd64.deb c468203e66bb2a1f1a1fff31412b465446138c102b93377ad5f91182843bf838 814592 libpython3.11-minimal_3.11.2-6+deb12u4_amd64.deb 131d26afc0542509f8009f15f99442e86b63680f06231c9404d790f310575994 1796752 libpython3.11-stdlib_3.11.2-6+deb12u4_amd64.deb 063bde7f098a0e10065be7b39d348229e63fd7b6ae5670dd84e1a0497da78051 1988556 libpython3.11_3.11.2-6+deb12u4_amd64.deb b087e46a3bb75926f318a03db0806ecbb7efa7f27cff579ef74c626b0262821d 36953448 python3.11-dbg_3.11.2-6+deb12u4_amd64.deb b41894f25f9e8df8a4ca1c184676505d68a8a2c3e08fbd6b1b44a990154de3dc 615696 python3.11-dev_3.11.2-6+deb12u4_amd64.deb e74848c549744eb47470f3968326cf829ff0278047a6d5516b64f907b64a1deb 1292 python3.11-full_3.11.2-6+deb12u4_amd64.deb 1c104e4804a7bc312b235ce7297a5f6aafac8a436cfd37f3ded8279bd2e837fe 2065936 python3.11-minimal_3.11.2-6+deb12u4_amd64.deb baddf8e077b7230fc2f18d98a79256e401717b68134cd3a08e6b2863f605aede 2054620 python3.11-nopie_3.11.2-6+deb12u4_amd64.deb d8c134cef1dc6e0d1fbbcdd6f986e11e94886bc78fd0770f3a2aeb96e7a465a5 5896 python3.11-venv_3.11.2-6+deb12u4_amd64.deb eee5fdc52dafa88d373466c09bae0b2ec943479516e70798a2c1b43d838977cd 13422 python3.11_3.11.2-6+deb12u4_amd64-buildd.buildinfo d115d2ed0c19ca75abd92c482dd6ede600b404f73e15669c5c06d8d1b0c2927f 573012 python3.11_3.11.2-6+deb12u4_amd64.deb Files: 233302fbf38f8feb01e3ae1d0faed081 16786276 debug optional libpython3.11-dbg_3.11.2-6+deb12u4_amd64.deb 5438bdcfe478c1a96cb39cebfcbe7f4e 4738300 libdevel optional libpython3.11-dev_3.11.2-6+deb12u4_amd64.deb 7d3c0afb31766d240b6c191a84706ac8 814592 python optional libpython3.11-minimal_3.11.2-6+deb12u4_amd64.deb f59ac4a332bd28e7fb38a0b589231ada 1796752 python optional libpython3.11-stdlib_3.11.2-6+deb12u4_amd64.deb 42fa655dccf8729122588868055e7754 1988556 libs optional libpython3.11_3.11.2-6+deb12u4_amd64.deb d428378e8078899efe916c079b44a361 36953448 debug optional python3.11-dbg_3.11.2-6+deb12u4_amd64.deb c77cf37b2d17d0437c24450d9225add2 615696 python optional python3.11-dev_3.11.2-6+deb12u4_amd64.deb 3d4c83c1572a8bab61ba3dbb85ac6523 1292 python optional python3.11-full_3.11.2-6+deb12u4_amd64.deb a48cf0abff83f61f6e27580b3e31b449 2065936 python optional python3.11-minimal_3.11.2-6+deb12u4_amd64.deb b29c3589cb1cb6bd34231f6fefdfa23d 2054620 python optional python3.11-nopie_3.11.2-6+deb12u4_amd64.deb 423afd49711bd188bdf2a9a4bbbdfcdd 5896 python optional python3.11-venv_3.11.2-6+deb12u4_amd64.deb 77ba9cb7c44eb2bcb9ad52833d6070ad 13422 python optional python3.11_3.11.2-6+deb12u4_amd64-buildd.buildinfo d9d8c831db53657ff9f373b6e283f786 573012 python optional python3.11_3.11.2-6+deb12u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Unr4QHS5Yi4rr9Q3KGKEAtjIVgFAmcIJ0QACgkQ3KGKEAtj IVjZWA/9HuiZzo6mhfNnHnr6rz3zVIYKdbpFlEPjtalunX3XDpXyVDr7vKWKi7oU Q0rSORmoUYk/X/4yXFr541EWsWISiyEw4MmnxrBbs9j1ByzE6VaXNeK9FBSeiMFV F7RwsMWqBYEWac/oQtyFZjN3bIkJEFnJx3YTByY8+5hs2RjIFxUtPHy9PisqEeys 4FsNOYpZ2mC930Xk/X10j48I3rOUFEFqGdm59EzTyE3zrdlDq90fL+Rj3nMvlgiK CNLWOgchjEE/DKGCPzDpOOnRQ0qsH7MBTjXkxXQsEgm00gFP8Utp8hAgza6Smbv1 bwdZNFMVoumJ82NSkqS0xt9qCbzOcK+ry0ECrGf/HOPthfTD474BLbVVqgN4cq2b C34SL56/qrcUahAqcZLGq7JiwO/4PUeDc8yJJ+eWTQG1m4MbGPgvgIuHaGiX/H6F Hc4ETLyWxdq8fwNmr/KFxwH1hr8WgBN9Rlz3AJ253MGb5felAgl5xEXgPe7g7uwl 981+dOBRjO00FN9pOjnLkbWTwYvyEsOJmNhYL3R0CD6fS09s3CMsb165VtKbM9Z3 1/f3TnHtbtqaDwU3h14EoowBgH9Fc1+12INC8u76v95FCKcoT7zTT+WfHJmx7ycH ibpjDVz7XxXPJBsYq8wAq9HmMYO08MyP3jhoUT/gCSC6ECSux2g= =ogJV -----END PGP SIGNATURE-----