From foo@bar Thu Oct 29 02:00:03 2026 Format: 1.8 Date: Tue, 27 Oct 2026 18:10:31 +0200 Source: python3.13 Binary: libpython3.13 libpython3.13-dbg libpython3.13-dev libpython3.13-minimal libpython3.13-stdlib python3.13 python3.13-dbg python3.13-dev python3.13-full python3.13-gdbm python3.13-minimal python3.13-nopie python3.13-tk python3.13-venv Architecture: hppa Version: 3.13.18-1 Distribution: sid Urgency: medium Maintainer: hppa Build Daemon (c8000) Changed-By: Stefano Rivera Description: libpython3.13 - Shared Python runtime library (version 3.13) libpython3.13-dbg - Debug Build of the Python Interpreter (version 3.13) libpython3.13-dev - Header files and a static library for Python (v3.13) libpython3.13-minimal - Minimal subset of the Python language (version 3.13) libpython3.13-stdlib - Interactive high-level object-oriented language (standard library python3.13 - Interactive high-level object-oriented language (version 3.13) python3.13-dbg - Debug Build of the Python Interpreter (version 3.13) python3.13-dev - Header files and a static library for Python (v3.13) python3.13-full - Python Interpreter with complete class library (version 3.13) python3.13-gdbm - GNU dbm database support for Python (v3.13) python3.13-minimal - Minimal subset of the Python language (version 3.13) python3.13-nopie - Python interpreter linked without PIE (version 3.13) python3.13-tk - Tkinter - Writing Tk applications with Python (v3.13) python3.13-venv - Interactive high-level object-oriented language (pyvenv binary, v Changes: python3.13 (3.13.18-1) unstable; urgency=medium . * Python 3.13.18 release. - CVE-2026-87910: tarfile: Honor None result of filter for link fallbacks. - CVE-2026-12345: Fix race condition in the cleanup of TemporaryDirectory. - CVE-2026-115557: Distrust compromised eMudhra intermediate CA keys. - CVE-2026-114583: Reject links replacing the destination in tar_filter. - CVE-2026-19553: Validate SSLContext.wrap_bio() parameters like wrap_socket(). - CVE-2026-19445: Use-after-free for server-side SSLContext with sni. - CVE-2026-82049: Fix tarfile `data`/`tar` filter bypass via hard link to a symlink - CVE-2026-15310: Bound zipfile decompression for bzip2/LZMA - CVE-2026-19672: tarfile: handle a member that leaves the destination but comes back. - CVE-2026-17084: Don't consider Unicode codepoint attributes outside RFC 3454 - CVE-2026-15806: Scope HTTPPasswordMgr credentials by URL scheme * Refresh patches. * Update the module-install-* autopkgtests for setuptools 80. Checksums-Sha1: 36918c45f1aedc90a2986bef017f2be23eb39bac 23370056 libpython3.13-dbg_3.13.18-1_hppa.deb 8b0c4f62b9a2c6912585b36bbbc9e657f96a3479 5092436 libpython3.13-dev_3.13.18-1_hppa.deb efcdf8f3b7ca04426c8c3deded2f115afac43df3 869204 libpython3.13-minimal_3.13.18-1_hppa.deb 4fb97bd5063d339af172e8446f016973d7ce8fa5 1919432 libpython3.13-stdlib_3.13.18-1_hppa.deb 8bbc5bd50ed9c61ab5c7568ea1c011da2a5d0115 2080472 libpython3.13_3.13.18-1_hppa.deb d26dcfe9cfa420a16feafea069ef0baf324c0dd7 53427340 python3.13-dbg_3.13.18-1_hppa.deb 01a1611ec0d3496b3a2c8c3ed9e1ff91cd05eea4 516276 python3.13-dev_3.13.18-1_hppa.deb fe1c3849e341542caf2084b3be52e923ea1b3559 1264 python3.13-full_3.13.18-1_hppa.deb 62651cb769bcf133b9caa05eecb651fcd6aabb71 26116 python3.13-gdbm_3.13.18-1_hppa.deb 4f4e09490f5a3177d35559359b3ca0c15004c401 2012800 python3.13-minimal_3.13.18-1_hppa.deb f2bd8d3920e0a3ec6975ab1b9654b07082f2ce6d 1999396 python3.13-nopie_3.13.18-1_hppa.deb 637883b61b35b875b0cf87f4bea1cb77041a2dbe 102596 python3.13-tk_3.13.18-1_hppa.deb e18262eccee944d71ca7648a1055040f788c8740 5468 python3.13-venv_3.13.18-1_hppa.deb 8faf0370cc5fcc9c31e5e81268dc465433f8c8b6 12766 python3.13_3.13.18-1_hppa.buildinfo 8256ca16fcd174077e197b9500252e1d284b39b2 805520 python3.13_3.13.18-1_hppa.deb Checksums-Sha256: d9eb3bd54468a0f97ae57a5fffb2fd697da623ece1db4f783c26c3fe15c2fb7b 23370056 libpython3.13-dbg_3.13.18-1_hppa.deb 1e28fda1130ad7031a9362efd25092db038a6130f7d8765e7707dcca46c7a350 5092436 libpython3.13-dev_3.13.18-1_hppa.deb 9e5671432e8d34b8e943554fa5c71ba17d295e77288a184b8f4b97b5f32874f6 869204 libpython3.13-minimal_3.13.18-1_hppa.deb b410159a3d41ecfeb49019f29abad891d18e016ed017f94e0e1bf3f2e4016339 1919432 libpython3.13-stdlib_3.13.18-1_hppa.deb 578656019db609ae9fa2b657c806ab52f9fac431f0bca0f450bb83183a93a328 2080472 libpython3.13_3.13.18-1_hppa.deb 982e958aa5a5bfc0102ee37489a3ea3da1c8ee42d8eb03bdffdbbb6478010868 53427340 python3.13-dbg_3.13.18-1_hppa.deb 0f9e1d8a0f2ac8dd5928516ecfe75d474a7963350281cc1740aba07b504f7279 516276 python3.13-dev_3.13.18-1_hppa.deb d1e026863dad1630c4b33e790822b71af5e99ceb888696cf24c6fafb9d778e55 1264 python3.13-full_3.13.18-1_hppa.deb f40f34fba45721b4143b5f883b2a2696f6ef3f7dbd9efbc349295f4e67917a47 26116 python3.13-gdbm_3.13.18-1_hppa.deb 1efab2da848ce418865fe2fb542513db1cc70a285708fc4e04443b1ba3857062 2012800 python3.13-minimal_3.13.18-1_hppa.deb ee5df79e7b4accd2d881e6bb1d34670af767423cf11591a3da3cbdf0ca3a196a 1999396 python3.13-nopie_3.13.18-1_hppa.deb 66a6cf542faf50c89baa7347fdb09a83cd1da8855ed9d43a16848160c4bea313 102596 python3.13-tk_3.13.18-1_hppa.deb 625de1feda21528784d2833956fa1911dd785104055b31d05310d60395b1bf08 5468 python3.13-venv_3.13.18-1_hppa.deb 80e843ed60439f13541a513a10e3cd66e09fa4805f73b163d6a2cb66d7baa0b6 12766 python3.13_3.13.18-1_hppa.buildinfo bce3bd6b413917ee7e08b03cf578ffb5406d8b2531085f1ce6c622b72d58f7ab 805520 python3.13_3.13.18-1_hppa.deb Files: d21830853bdce1fddc48eb6a46910a5a 23370056 debug optional libpython3.13-dbg_3.13.18-1_hppa.deb c0de5ae16850a4db3d19b4762f05320a 5092436 libdevel optional libpython3.13-dev_3.13.18-1_hppa.deb 54676cf03723bf6671c22c914306e34f 869204 python optional libpython3.13-minimal_3.13.18-1_hppa.deb 4a68fa69c0ca046322b917bd361987f3 1919432 python optional libpython3.13-stdlib_3.13.18-1_hppa.deb 334f722ec087c8fff89530e5d7bc976b 2080472 libs optional libpython3.13_3.13.18-1_hppa.deb ac6aaf54802d411deb29eb0080eab03f 53427340 debug optional python3.13-dbg_3.13.18-1_hppa.deb c94f9dec7f6b2fadd622ef5d9917a528 516276 python optional python3.13-dev_3.13.18-1_hppa.deb 0e0e59c6fabf2d8bf57a41f8401c08a7 1264 python optional python3.13-full_3.13.18-1_hppa.deb 7cc1ddfc224682f17902123702067fb3 26116 python optional python3.13-gdbm_3.13.18-1_hppa.deb 6f2860ba8eb0d0b3e77064326604f250 2012800 python optional python3.13-minimal_3.13.18-1_hppa.deb e78adf934b3a3b67f0977f4b5ec2050c 1999396 python optional python3.13-nopie_3.13.18-1_hppa.deb da4ee39f0f7bad8f3bb1baa552f1c987 102596 python optional python3.13-tk_3.13.18-1_hppa.deb e89b8462f5a7eb1231b2b095157d52b1 5468 python optional python3.13-venv_3.13.18-1_hppa.deb 2a5b702254b741ce925ed5f700146b45 12766 python optional python3.13_3.13.18-1_hppa.buildinfo ec3ff28c71fd37e07500661fbeb63808 805520 python optional python3.13_3.13.18-1_hppa.deb Signed-By: Debian buildd autosigning key for c8000