-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 May 2026 12:17:27 +0700
Source: python3.11
Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv
Architecture: armel
Version: 3.11.2-6+deb12u8
Distribution: bookworm
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Description:
 libpython3.11 - Shared Python runtime library (version 3.11)
 libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 libpython3.11-dev - Header files and a static library for Python (v3.11)
 libpython3.11-minimal - Minimal subset of the Python language (version 3.11)
 libpython3.11-stdlib - Interactive high-level object-oriented language (standard library
 python3.11 - Interactive high-level object-oriented language (version 3.11)
 python3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 python3.11-dev - Header files and a static library for Python (v3.11)
 python3.11-full - Python Interpreter with complete class library (version 3.11)
 python3.11-minimal - Minimal subset of the Python language (version 3.11)
 python3.11-nopie - Python interpreter linked without PIE (version 3.11)
 python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v
Changes:
 python3.11 (3.11.2-6+deb12u8) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Apply upstream patches for the following CVEs:
     - CVE-2025-13462: Incorrect parsing of TarInfo header when GNU long name
       and type AREGTYPE are combined
     - CVE-2026-2297: SourcelessFileLoader does not use io.open_code()
     - CVE-2026-3644: Reject control characters in more places in
       http.cookies.Morsel (follow-up of patch for CVE-2026-0672)
     - CVE-2026-4224: pyexpat.c: Unbounded C recursion in conv_content_model
       causes crash
     - CVE-2026-4519: Reject leading dashes in webbrowser.open()
     - CVE-2026-6100: Possible UAF in {LZMA,BZ2}Decompressor
   * Add patch to skip some failing XML tests. Failure is due to the fact that
     we build / tests against expat/2.5.0-1+deb12u2, which was patched for
     CVE-2023-52425, and that broke some tests. See the patch itself for more
     details.
Checksums-Sha1:
 ddd96a3b50cea3887c0933cac6240b6557e66b50 15798520 libpython3.11-dbg_3.11.2-6+deb12u8_armel.deb
 426701c2141d241be709e7543b6ecf58b61f2ffc 3394240 libpython3.11-dev_3.11.2-6+deb12u8_armel.deb
 818de36afcd097f6b88cf9f5ccf130be5c48282e 802024 libpython3.11-minimal_3.11.2-6+deb12u8_armel.deb
 ff1b2fb8f03978aeca08dc52f76b41ab8ab6048f 1674144 libpython3.11-stdlib_3.11.2-6+deb12u8_armel.deb
 b060aaca9052b8996b64f091356c4d4238772b2c 1683448 libpython3.11_3.11.2-6+deb12u8_armel.deb
 69ac5e3fa6e169ea3513af7837241d191b2a3574 35251540 python3.11-dbg_3.11.2-6+deb12u8_armel.deb
 832350f84ea903fd2bbfdaff4ffebc09596087b8 500648 python3.11-dev_3.11.2-6+deb12u8_armel.deb
 3b8e4e454c5b8535d6fd47c707cb5e6bcdf1f144 1288 python3.11-full_3.11.2-6+deb12u8_armel.deb
 40f9ca99f19c8aeade6ec44d186bf7018f42723b 1693532 python3.11-minimal_3.11.2-6+deb12u8_armel.deb
 3bda85b39fba558ec92fce68723eabcee2d39597 1683272 python3.11-nopie_3.11.2-6+deb12u8_armel.deb
 b5659133e5a5dadc48121395412e28e7d8e23183 5888 python3.11-venv_3.11.2-6+deb12u8_armel.deb
 85bb01d4ca9a51b51744cc46214714f7c5a33aed 13385 python3.11_3.11.2-6+deb12u8_armel-buildd.buildinfo
 232eba5a9d435b6d46b8e78c812f3edcc9af8b9a 574236 python3.11_3.11.2-6+deb12u8_armel.deb
Checksums-Sha256:
 a4308856b2e5acecc4337d4f6df77bca6a6719848ae41cbc45540b604950621d 15798520 libpython3.11-dbg_3.11.2-6+deb12u8_armel.deb
 184706f4ee0fbf56387f27e2c29fc524409e30a61f7b801e9cf48cd4f9433b27 3394240 libpython3.11-dev_3.11.2-6+deb12u8_armel.deb
 5b0163d92be3c6be2ad024684c3a65dd7cc615ee7b512df9c18496ce5aefa3ef 802024 libpython3.11-minimal_3.11.2-6+deb12u8_armel.deb
 62a277aed48d5c91ab54ea72cb48462c0780e22cafc9d034265abd439f2c08e8 1674144 libpython3.11-stdlib_3.11.2-6+deb12u8_armel.deb
 73f641236c1668d642ad0eefce45f2f8623241c2f89d2cc06b51faab487a56a3 1683448 libpython3.11_3.11.2-6+deb12u8_armel.deb
 45e4163cd45d923af9d1acfacee92661e06746baf1d1fcc1aabcecb7a77c6198 35251540 python3.11-dbg_3.11.2-6+deb12u8_armel.deb
 1a22d38bbfcc1cf6856cdb87bf603913b98b2c6b89f527dca855e85e985168d9 500648 python3.11-dev_3.11.2-6+deb12u8_armel.deb
 788f574e64b2c052f8a4d18fe0bae87dc18660d9c2f03cbcafa3511b92d6980c 1288 python3.11-full_3.11.2-6+deb12u8_armel.deb
 077b81448c88e427aed0b58f20bb142b0484f692087017ed048ded33be328fae 1693532 python3.11-minimal_3.11.2-6+deb12u8_armel.deb
 8a96966e0eab5fd2ba0a110a3c47a1a37c6c9397fd9a36f8eaaee895ff18e1ac 1683272 python3.11-nopie_3.11.2-6+deb12u8_armel.deb
 002c4fedc2b9494250eb75f1ca0afc080138ef8cec2da1cde90aaf930e240934 5888 python3.11-venv_3.11.2-6+deb12u8_armel.deb
 d63e00347b7d09371850579f5bfe6db999a63584e133434e41cc6dbb9e11de56 13385 python3.11_3.11.2-6+deb12u8_armel-buildd.buildinfo
 f693bcbd3f011dec383b422701b3ecf578faff280fafe889d48de5da1e701015 574236 python3.11_3.11.2-6+deb12u8_armel.deb
Files:
 b9a23eed9b09baadcf2419ea1ffcd3ce 15798520 debug optional libpython3.11-dbg_3.11.2-6+deb12u8_armel.deb
 78561b56a0b95db6779b822f27bbe0a5 3394240 libdevel optional libpython3.11-dev_3.11.2-6+deb12u8_armel.deb
 efb52657426c6eab0226f2e63dbdaa55 802024 python optional libpython3.11-minimal_3.11.2-6+deb12u8_armel.deb
 c2f838482228461eadd9a5a6fb115f4b 1674144 python optional libpython3.11-stdlib_3.11.2-6+deb12u8_armel.deb
 5d5064ba70b93580715e815dbbbe7774 1683448 libs optional libpython3.11_3.11.2-6+deb12u8_armel.deb
 01778bdbcb84a111e382c5b9fbc8d078 35251540 debug optional python3.11-dbg_3.11.2-6+deb12u8_armel.deb
 54ec4b96ae8f293599d8f50e4733d65e 500648 python optional python3.11-dev_3.11.2-6+deb12u8_armel.deb
 a18ddc548e1986b8199def0466e27f97 1288 python optional python3.11-full_3.11.2-6+deb12u8_armel.deb
 bdf86ecd3fc3501c9288d15a124f854c 1693532 python optional python3.11-minimal_3.11.2-6+deb12u8_armel.deb
 3963c84dff1bc4886d6bcad309970ddd 1683272 python optional python3.11-nopie_3.11.2-6+deb12u8_armel.deb
 5104185efec4764a1a1cf5184993de81 5888 python optional python3.11-venv_3.11.2-6+deb12u8_armel.deb
 0827d1cc209b7ed08f052d47814508a2 13385 python optional python3.11_3.11.2-6+deb12u8_armel-buildd.buildinfo
 f721000f8985f72ee5fdabe7ae6f4097 574236 python optional python3.11_3.11.2-6+deb12u8_armel.deb

-----BEGIN PGP SIGNATURE-----
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=RUBQ
-----END PGP SIGNATURE-----