-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Dec 2024 16:22:45 -0400 Source: pypy3 Architecture: source Version: 7.3.11+dfsg-2+deb12u3 Distribution: bookworm Urgency: medium Maintainer: Stefano Rivera Changed-By: Stefano Rivera Changes: pypy3 (7.3.11+dfsg-2+deb12u3) bookworm; urgency=medium . * Security patches to the standard library: - CVE-2023-27043: Parse email addresses with special characters, correctly. - CVE-2024-9287: Quote path names in venv activation scripts. - CVE-2024-4032: Fix private IP address ranges. - CVE-2024-6232: Fix ReDoS when parsing tarfile headers. - CVE-2024-8088: Avoid infinite loop in zip file parsing. - CVE-2024-6923: Encode newlines in headers in the email module. - CVE-2024-7592: Quadratic complexity parsing cookies with backslashes. - CVE-2024-11168: Ensure addresses in brackets are valid IPv6 addresses. * Clean the python 2.7 source tree. * Clean cffi modules C source, lex and yacc tabs. Checksums-Sha1: 617f6f0031e8ada7f2c0da59f7b30a34d3fe0c2f 2416 pypy3_7.3.11+dfsg-2+deb12u3.dsc e129d2463c3fc6a5f6d40c1a3f681ba6f59301a4 89060 pypy3_7.3.11+dfsg-2+deb12u3.debian.tar.xz 8fc0683ecc242a5755f876597ae725868127ac3f 11068 pypy3_7.3.11+dfsg-2+deb12u3_source.buildinfo Checksums-Sha256: fdb1801bb5093287377ff36045cf285bf6c68536f85ac10836556e3058cf0afd 2416 pypy3_7.3.11+dfsg-2+deb12u3.dsc 1c89e50b818aba070b4df7c50a711a09cc6866ff2f24c2e9489c0849b2628bd5 89060 pypy3_7.3.11+dfsg-2+deb12u3.debian.tar.xz f1cbcc30923124d410d0c9f5b201ad92ec3cf4f523a42b5227d4a7fa8dd713f9 11068 pypy3_7.3.11+dfsg-2+deb12u3_source.buildinfo Files: 7e01e21357f1e78508d60d4f35f32080 2416 python optional pypy3_7.3.11+dfsg-2+deb12u3.dsc 949b9197d29c904bffdebc262beaf29f 89060 python optional pypy3_7.3.11+dfsg-2+deb12u3.debian.tar.xz 90fc80203da1f4806b2c60369ae24a2b 11068 python optional pypy3_7.3.11+dfsg-2+deb12u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCZ2nH/xQcc3RlZmFub3JA ZGViaWFuLm9yZwAKCRBHew2wJjpU2F6lAQDU2Gsgc/npsJHjyc6y9luk1K1Emsnc a3jpCxCHW5kn6QD/aBQl3Rlxii7c2dG2fqxj+DlDfh5Qqe2r4jzzgLiboA8= =mKbJ -----END PGP SIGNATURE-----