-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 12 May 2026 12:17:27 +0700
Source: python3.11
Binary: libpython3.11 libpython3.11-dbg libpython3.11-dev libpython3.11-minimal libpython3.11-stdlib python3.11 python3.11-dbg python3.11-dev python3.11-full python3.11-minimal python3.11-nopie python3.11-venv
Architecture: s390x
Version: 3.11.2-6+deb12u8
Distribution: bookworm
Urgency: medium
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Description:
 libpython3.11 - Shared Python runtime library (version 3.11)
 libpython3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 libpython3.11-dev - Header files and a static library for Python (v3.11)
 libpython3.11-minimal - Minimal subset of the Python language (version 3.11)
 libpython3.11-stdlib - Interactive high-level object-oriented language (standard library
 python3.11 - Interactive high-level object-oriented language (version 3.11)
 python3.11-dbg - Debug Build of the Python Interpreter (version 3.11)
 python3.11-dev - Header files and a static library for Python (v3.11)
 python3.11-full - Python Interpreter with complete class library (version 3.11)
 python3.11-minimal - Minimal subset of the Python language (version 3.11)
 python3.11-nopie - Python interpreter linked without PIE (version 3.11)
 python3.11-venv - Interactive high-level object-oriented language (pyvenv binary, v
Changes:
 python3.11 (3.11.2-6+deb12u8) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Apply upstream patches for the following CVEs:
     - CVE-2025-13462: Incorrect parsing of TarInfo header when GNU long name
       and type AREGTYPE are combined
     - CVE-2026-2297: SourcelessFileLoader does not use io.open_code()
     - CVE-2026-3644: Reject control characters in more places in
       http.cookies.Morsel (follow-up of patch for CVE-2026-0672)
     - CVE-2026-4224: pyexpat.c: Unbounded C recursion in conv_content_model
       causes crash
     - CVE-2026-4519: Reject leading dashes in webbrowser.open()
     - CVE-2026-6100: Possible UAF in {LZMA,BZ2}Decompressor
   * Add patch to skip some failing XML tests. Failure is due to the fact that
     we build / tests against expat/2.5.0-1+deb12u2, which was patched for
     CVE-2023-52425, and that broke some tests. See the patch itself for more
     details.
Checksums-Sha1:
 9859d578c5ccc217a6de4c25cff697da34dd914e 16023592 libpython3.11-dbg_3.11.2-6+deb12u8_s390x.deb
 9bb06897496778e5098d029f87623017ee29c6d2 4297984 libpython3.11-dev_3.11.2-6+deb12u8_s390x.deb
 a7190f8cc7fc319df8063c17d94392d1b50eeb5b 810068 libpython3.11-minimal_3.11.2-6+deb12u8_s390x.deb
 dec6772989d164a3eac0bd6fbb3859734a23d086 1735952 libpython3.11-stdlib_3.11.2-6+deb12u8_s390x.deb
 ea7ba1d5e616d99de2d90ece01a2f4a275161b28 1807316 libpython3.11_3.11.2-6+deb12u8_s390x.deb
 46dd20afbd0b7bdcfd1b36e5781d72617f8375ac 36428260 python3.11-dbg_3.11.2-6+deb12u8_s390x.deb
 f64b37dd141e3897e0f81a59564c23dd8e8bfcf1 617356 python3.11-dev_3.11.2-6+deb12u8_s390x.deb
 5f26e01a2831e1811eaa102f64ade0da0336c96f 1288 python3.11-full_3.11.2-6+deb12u8_s390x.deb
 266503fc34c324292cf3a49fb963160fcecab1a7 1833192 python3.11-minimal_3.11.2-6+deb12u8_s390x.deb
 425c8c4f93f5345dce906500f33069149fb9599a 1821392 python3.11-nopie_3.11.2-6+deb12u8_s390x.deb
 2cb325d94a71e1a8d32271bcc7c59d365f5fc37e 5892 python3.11-venv_3.11.2-6+deb12u8_s390x.deb
 ee0b3c7a25541179a3580d70097e08e118674656 13448 python3.11_3.11.2-6+deb12u8_s390x-buildd.buildinfo
 05e88f5cb3fbd24fd52b31539fdaf3ea123e35eb 574236 python3.11_3.11.2-6+deb12u8_s390x.deb
Checksums-Sha256:
 c2ca97a5fc74c24d1b7c73b44550380604f2f0a2d057ddffa03c03b66208a792 16023592 libpython3.11-dbg_3.11.2-6+deb12u8_s390x.deb
 37236e0fa030cd8d15bbb17b134466ac630b8972de61748f036161a8d629db20 4297984 libpython3.11-dev_3.11.2-6+deb12u8_s390x.deb
 cc3c639294d26b8ddbcf3f168b5d7581359936fb829c7a8c8df3295d4a4f802f 810068 libpython3.11-minimal_3.11.2-6+deb12u8_s390x.deb
 5de63a5067eed4fa55f1cb78ef1bd579ba373f494234475f2207e2eeb647251e 1735952 libpython3.11-stdlib_3.11.2-6+deb12u8_s390x.deb
 2ce63cbc1247d615b912c93c2af8863710d0bf4fb4a6e8d257ff92c185f4e733 1807316 libpython3.11_3.11.2-6+deb12u8_s390x.deb
 a5fba4f1db6a820a659c914175885e5126b5ba8e0b8dcfd3b2b6a2dd4a806916 36428260 python3.11-dbg_3.11.2-6+deb12u8_s390x.deb
 c944e5866388f957fee908ed05a8ab5445fe921d47127078a64b3e6afb1e0fe6 617356 python3.11-dev_3.11.2-6+deb12u8_s390x.deb
 83e6925d9231140052c623abdad5765f64fd304b7cc2199a244141575dc7fa68 1288 python3.11-full_3.11.2-6+deb12u8_s390x.deb
 04885deee5ed9121ba53e2eb52c9368d3a880b9a46b150a9edb1ae354caa7e1d 1833192 python3.11-minimal_3.11.2-6+deb12u8_s390x.deb
 835dfdf4ff1f02693baa8208aacd0b8a2f8afa5e24f2b22cf0c4209c58176d7d 1821392 python3.11-nopie_3.11.2-6+deb12u8_s390x.deb
 9859a4475827e3b7694208d91dfd4816296bded25a70e9acdef5126e7c9931e7 5892 python3.11-venv_3.11.2-6+deb12u8_s390x.deb
 1e41142c84e275553aa637991deed8702504eb3b16d9217762d76b4269d60bc4 13448 python3.11_3.11.2-6+deb12u8_s390x-buildd.buildinfo
 e27f77aed7b66156cabe4ca88e72838a92cc6fcacda26afc4c2151e8ed6ac7c4 574236 python3.11_3.11.2-6+deb12u8_s390x.deb
Files:
 00d602612623e82aed3f621388cdd203 16023592 debug optional libpython3.11-dbg_3.11.2-6+deb12u8_s390x.deb
 cf25c8962caa94c92a41899df8a9ee13 4297984 libdevel optional libpython3.11-dev_3.11.2-6+deb12u8_s390x.deb
 9e26abf536e6ac5dd196715fbaacf6f8 810068 python optional libpython3.11-minimal_3.11.2-6+deb12u8_s390x.deb
 d476cb54e6ca52c6119f21e371a76ad9 1735952 python optional libpython3.11-stdlib_3.11.2-6+deb12u8_s390x.deb
 2cd6c275b37342343475a90d058169b9 1807316 libs optional libpython3.11_3.11.2-6+deb12u8_s390x.deb
 6fdc25bec2d49826170fd754084a9efe 36428260 debug optional python3.11-dbg_3.11.2-6+deb12u8_s390x.deb
 35c62ebdc7226d8b26d7ca8b5e9a7255 617356 python optional python3.11-dev_3.11.2-6+deb12u8_s390x.deb
 d21a86fd24c870a6f97b262e95435d79 1288 python optional python3.11-full_3.11.2-6+deb12u8_s390x.deb
 ac9ecccec699c81c50d407a5d5b53058 1833192 python optional python3.11-minimal_3.11.2-6+deb12u8_s390x.deb
 0c121c2a652baa746f4cb672bf7c22a9 1821392 python optional python3.11-nopie_3.11.2-6+deb12u8_s390x.deb
 9a454671861f3ee2ea0d170fa80e27a6 5892 python optional python3.11-venv_3.11.2-6+deb12u8_s390x.deb
 05d061402fbab99566e6e5192f47e9f4 13448 python optional python3.11_3.11.2-6+deb12u8_s390x-buildd.buildinfo
 d370cb52c800cb63ed4f06fe8f47e6a6 574236 python optional python3.11_3.11.2-6+deb12u8_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=GD30
-----END PGP SIGNATURE-----