Skip to content

Update from debian/bookworm for apertis/v2025dev3

Apertis CI robot requested to merge proposed-updates/debian/bookworm/33f965ef into apertis/v2025dev3

python3.11 (3.11.2-6+deb12u2) bookworm; urgency=medium . [ Steve McIntyre ]

  • Apply upstream security fix for CVE-2024-0450 Protect zipfile from "quoted-overlap" zipbomb. Closes: #1070133
  • Apply and tweak upstream security fix for CVE-2023-6597 tempfile.TemporaryDirectory: fix symlink bug in cleanup Closes: #1070135 . [ Stefano Rivera ]
  • Apply upstream patch to avoid a potential null pointer dereference in fileutils.
  • Apply upstream security fix for CVE-2023-41105 os.path.normpath(): Path truncation at null bytes.
  • Apply upstream security fix for CVE-2023-40217 Avoid bypass TLS of handshake protections on closed sockets.
  • Apply upstream security fix for CVE-2023-24329 Strip C0 control and space characters in urlsplit. . python3.11 (3.11.2-6+deb12u1) bookworm; urgency=medium . [ Anders Kaseorg ]
  • Fix a use-after-free crash when deallocating a frame object (closes: #1050843).

Merge request reports

Apertis Website Terms of Use Privacy Policy