Format: 1.8 Date: Wed, 10 Apr 2024 18:26:07 +0100 Source: python3.11 Built-For-Profiles: noudeb Architecture: source Version: 3.11.6-3ubuntu0.1 Distribution: mantic-security Urgency: medium Maintainer: Ubuntu Core Developers Changed-By: Allen Huang Changes: python3.11 (3.11.6-3ubuntu0.1) mantic-security; urgency=medium . * SECURITY UPDATE: incorrect permission assignment - debian/patches/CVE-2023-6597.patch: fix symlink bug in cleanup. - CVE-2023-6597 * SECURITY UPDATE: Zip-Bombs with overlap entries - debian/patches/CVE-2024-0450.patch: Protect zipfile from "quoted-overlap" zipbomb. Raise BadZipFile when try to read an entry that overlaps with other entry or central directory. - CVE-2024-0450 Checksums-Sha1: 1cbfca8c406b4c01364cb92c6f8db8c50d10dc59 3787 python3.11_3.11.6-3ubuntu0.1.dsc 17598b8ec470ab4a45bc6027619bae96283c972e 217108 python3.11_3.11.6-3ubuntu0.1.debian.tar.xz b612ea0dfa9adabe5b14b489938b05c0c6ae898e 10531 python3.11_3.11.6-3ubuntu0.1_source.buildinfo Checksums-Sha256: 901b54bd84dac2d1b599f20273b6d8ca0f6a3691b20fc4f89454c97ccb9aba28 3787 python3.11_3.11.6-3ubuntu0.1.dsc 89de721dd03fa2fbfad3a8c0da51a934afeeaebfe7ecc4cf5ec72bf76c16af49 217108 python3.11_3.11.6-3ubuntu0.1.debian.tar.xz 3117dffb74eb96243342306ed996e86012a02830310f8999ea3d3cadd4cdd62c 10531 python3.11_3.11.6-3ubuntu0.1_source.buildinfo Files: a29fb41f3dfc92bcad661be584b7d034 3787 python optional python3.11_3.11.6-3ubuntu0.1.dsc cc3e11e38869aa95fc35beb6aaa22b06 217108 python optional python3.11_3.11.6-3ubuntu0.1.debian.tar.xz 75758b95e1c25fdff5b6400c7f9bd85f 10531 python optional python3.11_3.11.6-3ubuntu0.1_source.buildinfo Original-Maintainer: Matthias Klose