-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 May 2026 12:17:27 +0700
Source: python3.11
Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv
Architecture: amd64
Version: 3.11.2-6+deb12u8
Distribution: bookworm
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Description:
 libpython3.11 - Shared Python runtime library (version 3.11)
 libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 libpython3.11-dev - Header files and a static library for Python (v3.11)
 libpython3.11-minimal - Minimal subset of the Python language (version 3.11)
 libpython3.11-stdlib - Interactive high-level object-oriented language (standard library
 python3.11 - Interactive high-level object-oriented language (version 3.11)
 python3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 python3.11-dev - Header files and a static library for Python (v3.11)
 python3.11-full - Python Interpreter with complete class library (version 3.11)
 python3.11-minimal - Minimal subset of the Python language (version 3.11)
 python3.11-nopie - Python interpreter linked without PIE (version 3.11)
 python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v
Changes:
 python3.11 (3.11.2-6+deb12u8) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Apply upstream patches for the following CVEs:
     - CVE-2025-13462: Incorrect parsing of TarInfo header when GNU long name
       and type AREGTYPE are combined
     - CVE-2026-2297: SourcelessFileLoader does not use io.open_code()
     - CVE-2026-3644: Reject control characters in more places in
       http.cookies.Morsel (follow-up of patch for CVE-2026-0672)
     - CVE-2026-4224: pyexpat.c: Unbounded C recursion in conv_content_model
       causes crash
     - CVE-2026-4519: Reject leading dashes in webbrowser.open()
     - CVE-2026-6100: Possible UAF in {LZMA,BZ2}Decompressor
   * Add patch to skip some failing XML tests. Failure is due to the fact that
     we build / tests against expat/2.5.0-1+deb12u2, which was patched for
     CVE-2023-52425, and that broke some tests. See the patch itself for more
     details.
Checksums-Sha1:
 0e0e25c73ea54d2876021c1c6277660285b27d0d 16802900 libpython3.11-dbg_3.11.2-6+deb12u8_amd64.deb
 ff6ab00fb67ee8f9e95bf3a0ca175eb556dd520a 4737920 libpython3.11-dev_3.11.2-6+deb12u8_amd64.deb
 5ca03246bbe926929a57e43222227a7efad1d93f 817740 libpython3.11-minimal_3.11.2-6+deb12u8_amd64.deb
 85fd8963262ea1caac4a3a5d74227bf19c11c6fe 1798560 libpython3.11-stdlib_3.11.2-6+deb12u8_amd64.deb
 f30444485c6c02169179ddac9d359427b75688b8 1988456 libpython3.11_3.11.2-6+deb12u8_amd64.deb
 406617a35ce64fe202d827b1dc968f227ce83f68 36995412 python3.11-dbg_3.11.2-6+deb12u8_amd64.deb
 0c125290b2ed2e6e23e73860db4c1f3e33fcabfa 619232 python3.11-dev_3.11.2-6+deb12u8_amd64.deb
 0dd783b26eab6303e292149eaabeaee47ec70ab2 1288 python3.11-full_3.11.2-6+deb12u8_amd64.deb
 538476b03ce9ca9045153e9832e449452827d7cb 2064968 python3.11-minimal_3.11.2-6+deb12u8_amd64.deb
 be50f0e7775b1f0be96fa37e0cbf52cb34fbc7f4 2056184 python3.11-nopie_3.11.2-6+deb12u8_amd64.deb
 e3489963408a8b381c14ba39a07aa197b0dddbd0 5888 python3.11-venv_3.11.2-6+deb12u8_amd64.deb
 0b0459b0b4cc01cf9a8df91d788a5df0029a3e28 13646 python3.11_3.11.2-6+deb12u8_amd64-buildd.buildinfo
 6a0097352b7ed13dcbe135e45f2ec30f5fca359a 574236 python3.11_3.11.2-6+deb12u8_amd64.deb
Checksums-Sha256:
 f1e69e6eebec3c9f74f7aaa4b6af04fdc5c84702ba1aa1a0023bb2b297f8f23e 16802900 libpython3.11-dbg_3.11.2-6+deb12u8_amd64.deb
 01a8eddeb8505bb6e2c01209cda66b41fb5ebeaa64e69d0e25f7131915f1cd32 4737920 libpython3.11-dev_3.11.2-6+deb12u8_amd64.deb
 f3beaa03994ffedacf73c43a0843d53b062d347115d8af65bee2034552a4e6f9 817740 libpython3.11-minimal_3.11.2-6+deb12u8_amd64.deb
 890b3540dad8a1ccc0deeca025db735bcc82629a76adacbe3b50fcc06ed528ca 1798560 libpython3.11-stdlib_3.11.2-6+deb12u8_amd64.deb
 63845d53d5f64d2362cfb6007ec175ad1c6044cebe60a1885eff76d2ce637c35 1988456 libpython3.11_3.11.2-6+deb12u8_amd64.deb
 8b37edb84f7543934dccbbda8871f38e48dc43c29ca14c075936f059700ef69e 36995412 python3.11-dbg_3.11.2-6+deb12u8_amd64.deb
 b17df208ce4d8967269d7ef5aa7f9c8fc873f8c766a9b6382aae23a48ea71c17 619232 python3.11-dev_3.11.2-6+deb12u8_amd64.deb
 937599a7474837d08d66ad8285f211315c034f936d9d78f3ef1ee135f990eefb 1288 python3.11-full_3.11.2-6+deb12u8_amd64.deb
 4aba533f7cc5e7b93b7ff24482840e96813f5bcde9cce028395b65a0d799ccee 2064968 python3.11-minimal_3.11.2-6+deb12u8_amd64.deb
 c13cc2bf41d022524649a5f4709316660132ae04cf29ae0bb30a50710543fc22 2056184 python3.11-nopie_3.11.2-6+deb12u8_amd64.deb
 1391d405ac12a1bbdd75d36a738ec410e5b01f9e065cc38974d9976a37b59c99 5888 python3.11-venv_3.11.2-6+deb12u8_amd64.deb
 5517557054d5a8c7b3360ed81c260196ffcb50d730ef557c7fd31b5b98421302 13646 python3.11_3.11.2-6+deb12u8_amd64-buildd.buildinfo
 cd7b10c24281416a6acb22cd23ed7391c7dddd4a3d4d4a63d37faa786639b5de 574236 python3.11_3.11.2-6+deb12u8_amd64.deb
Files:
 6280e3f2039c0d51a76ae1f099e136cb 16802900 debug optional libpython3.11-dbg_3.11.2-6+deb12u8_amd64.deb
 68ddb241f0f1570fefb8dff6abf732e3 4737920 libdevel optional libpython3.11-dev_3.11.2-6+deb12u8_amd64.deb
 4788351539b7825e939d3e17111afc68 817740 python optional libpython3.11-minimal_3.11.2-6+deb12u8_amd64.deb
 7710c475d3de61a462c6ad516f70561e 1798560 python optional libpython3.11-stdlib_3.11.2-6+deb12u8_amd64.deb
 aae5b5bda6fbc050c02503262949da1f 1988456 libs optional libpython3.11_3.11.2-6+deb12u8_amd64.deb
 3eb1b692f4bc1672ecdecbb01759861a 36995412 debug optional python3.11-dbg_3.11.2-6+deb12u8_amd64.deb
 2a2d43a72e4a139a8875530f99309ed3 619232 python optional python3.11-dev_3.11.2-6+deb12u8_amd64.deb
 277dfc9606fdd263977f2b516e55f468 1288 python optional python3.11-full_3.11.2-6+deb12u8_amd64.deb
 4fcd420436b7043382369b617521c11e 2064968 python optional python3.11-minimal_3.11.2-6+deb12u8_amd64.deb
 e650a3189f6903c869c5160a21da0ea2 2056184 python optional python3.11-nopie_3.11.2-6+deb12u8_amd64.deb
 bf67f8e92525202f444137c005c227a4 5888 python optional python3.11-venv_3.11.2-6+deb12u8_amd64.deb
 f4aea14f81b00494e3d1b9ae6f243b03 13646 python optional python3.11_3.11.2-6+deb12u8_amd64-buildd.buildinfo
 d2b6cecbc9b46432f80085aeef98eb1c 574236 python optional python3.11_3.11.2-6+deb12u8_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=AvYY
-----END PGP SIGNATURE-----