-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 Nov 2024 23:22:50 +0200 Source: python3.11 Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv Architecture: amd64 Version: 3.11.2-6+deb12u5 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Adrian Bunk Description: libpython3.11 - Shared Python runtime library (version 3.11) libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11) libpython3.11-dev - Header files and a static library for Python (v3.11) libpython3.11-minimal - Minimal subset of the Python language (version 3.11) libpython3.11-stdlib - Interactive high-level object-oriented language (standard library python3.11 - Interactive high-level object-oriented language (version 3.11) python3.11-dbg - Debug Build of the Python Interpreter (version 3.11) python3.11-dev - Header files and a static library for Python (v3.11) python3.11-full - Python Interpreter with complete class library (version 3.11) python3.11-minimal - Minimal subset of the Python language (version 3.11) python3.11-nopie - Python interpreter linked without PIE (version 3.11) python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v Closes: 1059298 Changes: python3.11 (3.11.2-6+deb12u5) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2023-27043: Reject malformed addresses in email.parseaddr() (Closes: #1059298) * CVE-2024-6923: Encode newlines in headers in the email module * CVE-2024-7592: Quadratic complexity parsing cookies with backslashes * CVE-2024-9287: venv activation scripts did't quote paths * CVE-2024-11168: urllib functions improperly validated bracketed hosts Checksums-Sha1: 9f8dbeab33ad87f2455a17f8cfaa27d69355f0ae 16773072 libpython3.11-dbg_3.11.2-6+deb12u5_amd64.deb d446d41f48d2c84c77079ae037ed6b08db519670 4738720 libpython3.11-dev_3.11.2-6+deb12u5_amd64.deb dd6c95995e65e9d993d4b8ee0102ac8326f5c721 816288 libpython3.11-minimal_3.11.2-6+deb12u5_amd64.deb 03d7262593604ffc62315577f3acdca9fb95e57a 1796612 libpython3.11-stdlib_3.11.2-6+deb12u5_amd64.deb 4829792425ff92ead60b5d93594b0c24b0b7d4d3 1987696 libpython3.11_3.11.2-6+deb12u5_amd64.deb cb018cfeb766a51f6d67b947dc8ed94e89618636 36955104 python3.11-dbg_3.11.2-6+deb12u5_amd64.deb 80f970af5609c567436807297b8ed5ace9f07e81 616060 python3.11-dev_3.11.2-6+deb12u5_amd64.deb 3f8a4662d13bf2763435966105d156597d740253 1288 python3.11-full_3.11.2-6+deb12u5_amd64.deb e56a18deb01c8badcb1fb185721bc89d2ddd06d8 2067232 python3.11-minimal_3.11.2-6+deb12u5_amd64.deb cb0eab50a4efaf86ef45bc0c1762c7a70db8ff90 2054492 python3.11-nopie_3.11.2-6+deb12u5_amd64.deb d2defd4b5bc69ec839928af0e92b4c1791078c60 5892 python3.11-venv_3.11.2-6+deb12u5_amd64.deb f55e0f0a1d1ad2fa0778d24b2fe7d4e5c57e9f9f 13438 python3.11_3.11.2-6+deb12u5_amd64-buildd.buildinfo fc7a191ec0cb4a25e3cd074eedb2c580d74ad2d6 573216 python3.11_3.11.2-6+deb12u5_amd64.deb Checksums-Sha256: 750ebd67156f328b8ddc31af278a00d1b0c6e7fd12c4fe76cf3ba2ca2d4ed22b 16773072 libpython3.11-dbg_3.11.2-6+deb12u5_amd64.deb 4c8a49dc94e7ed3be207c481d1160a1141ce4a5009840b2bd9017f6aadaed9f6 4738720 libpython3.11-dev_3.11.2-6+deb12u5_amd64.deb 4d80534e33d8cdc1e952b0061642f6b3e8f86f96450a08554e5e140e1da9e469 816288 libpython3.11-minimal_3.11.2-6+deb12u5_amd64.deb 80a24d4c74c0c39ec4ca9ea7d0949bce811d546288ed989f6f5de7fd7c8447fe 1796612 libpython3.11-stdlib_3.11.2-6+deb12u5_amd64.deb 7a27040b168838f19553cac516e5892bdcb61e332eeca866e5a60087ffd07dbd 1987696 libpython3.11_3.11.2-6+deb12u5_amd64.deb e4b6efe8c33d8d8c0d84fe8300d157a6aed4428ccd0a33f61cf614740e751b61 36955104 python3.11-dbg_3.11.2-6+deb12u5_amd64.deb a0a7dfff99406c7814df08015bd0ffa9abe091c687049b95c10b8b8c7db64d26 616060 python3.11-dev_3.11.2-6+deb12u5_amd64.deb da38399d00df138cf051747bbcd4e85a5b8fb553d745594eb5df99a3349b04c7 1288 python3.11-full_3.11.2-6+deb12u5_amd64.deb 34d52b4f90daa7938b8c8a115e72559843caf305243153c74242b1b966cc4a79 2067232 python3.11-minimal_3.11.2-6+deb12u5_amd64.deb 1536bcb9788d69fd11e5f9229e7bfeb0ead120b024291812df1e3c6499a58760 2054492 python3.11-nopie_3.11.2-6+deb12u5_amd64.deb 1a079ed051774716883d7e402d945cb49a830ae800d0d6b576587c2abaee96e0 5892 python3.11-venv_3.11.2-6+deb12u5_amd64.deb 3aaf2413fd2bd83fe1bc826f8dc0b2e3cfcbca50618cd40ee6a9e2a37d706c61 13438 python3.11_3.11.2-6+deb12u5_amd64-buildd.buildinfo 2286a844fc820c0e79454bbbb41100db4592076bbc09dff2b9b8bd5add0a7275 573216 python3.11_3.11.2-6+deb12u5_amd64.deb Files: f0db11633d7b31ee85bba360f30ff744 16773072 debug optional libpython3.11-dbg_3.11.2-6+deb12u5_amd64.deb 76027b5da76614a6840a03b7e653802a 4738720 libdevel optional libpython3.11-dev_3.11.2-6+deb12u5_amd64.deb aee8d8a7e43fb575f1167f0b34f4c87b 816288 python optional libpython3.11-minimal_3.11.2-6+deb12u5_amd64.deb 0460cf8df963037521e613aba47a1cc5 1796612 python optional libpython3.11-stdlib_3.11.2-6+deb12u5_amd64.deb f0294641568ca45e288873f6e1b6ff45 1987696 libs optional libpython3.11_3.11.2-6+deb12u5_amd64.deb a45862ee0bb2b21d0af718eaa4e6ac90 36955104 debug optional python3.11-dbg_3.11.2-6+deb12u5_amd64.deb 846f7230a1f39a756967c20d6add734a 616060 python optional python3.11-dev_3.11.2-6+deb12u5_amd64.deb 4bb2858c2af55e0fd10f0d24fc6018bd 1288 python optional python3.11-full_3.11.2-6+deb12u5_amd64.deb 403b98e8c8b079130244624d43fc1dc0 2067232 python optional python3.11-minimal_3.11.2-6+deb12u5_amd64.deb 47221a5fcaed7bd1cc76ac92c82afa9a 2054492 python optional python3.11-nopie_3.11.2-6+deb12u5_amd64.deb d90d1aa6868613142e9229e9a05bc99a 5892 python optional python3.11-venv_3.11.2-6+deb12u5_amd64.deb 70f2409656926321ecc6db17cae94c2e 13438 python optional python3.11_3.11.2-6+deb12u5_amd64-buildd.buildinfo 8b43afe59b958d592c6f530d56448418 573216 python optional python3.11_3.11.2-6+deb12u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmdVwFgACgkQOni7ZmUp KEeZTBAAyqfcdzF9PTEELjR5TLH48CnSGy41pMUApaDVNxPCLl+BE8r1gTkUBKrl F1hWDlAEzQwHoNZ2Ys5sjYZW5jXqqG2mRCOrN9Q+jMdB3I1iPCENeSXk09gi+kRH pKsp6eNqTLzeAOoWzbPn3Mqx0YTEuCjiMLKd53fC7u+7W1Oc7MHJ7cIBsxRRKaye Aqa8mZGZ5FLl0NYL9GTPN8MMaHFrlL+C0kkphrRxNYxV1nc/jEQJkHFlK1DYNf09 B6l6TMwPDW9++ktpukpVJ/TPbcCYWeH+qwDuIFIjMLqzIFSrr4gNE9VZQH7YbHUz QWeeYzX4+YStRgCX9Rp5umBUajsCknpc5oWQTDxgqeDGDSoC80e0Gd0/5WZgFpOF gbcHD669Rx9uCnrqNgE9y7hdmS9DzqxJEsxF8OkfxFbNmORWxQSgSd2nJY2Ffhpa mg5j4YqLRHXHC4g42Cs+ip3rtC6JgxDZkuOJHuI+/VwbmJIDuvh6PLzMDQ4NZ76m gutp5jP4tIElzaxd+Y4viLQYhK/lIBC37xipvgadwYYHBsYH/KZKe7imBB+ichZn PT5wD21gtO8Dm4HAlVinqGYYdGb/TGmCG/8TIgRLGRcoCHdNg5KNPTDJhpMRzvcV 7+iHK+zTb9/AvZpBQ1Yu5mBzAur7B/3JFkbYN3TeqcOw9bQVPsU= =HzRd -----END PGP SIGNATURE-----