-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 13 Jun 2026 10:18:01 -0400
Source: python3.13
Architecture: source
Version: 3.13.5-2+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Stefano Rivera <stefanor@debian.org>
Closes: 1108039 1138157
Changes:
python3.13 (3.13.5-2+deb13u3) trixie; urgency=medium
.
[ Stefano Rivera ]
* Patches:
- Fix a crash in SNI callback when the SSL object is gone.
- Fix reference leaks in ssl.SSLContext objects. (Closes: #1138157)
- Avoid garbage collecting objects too early when sharing __dict__
(Closes: #1108039)
- Update the patch for CVE-2026-6019 to use decodeURIComponent.
.
[ Moritz Mühlenhoff ]
* CVE-2026-1502
* CVE-2026-3276
* CVE-2026-7774
* CVE-2026-8328
* CVE-2026-9669
Checksums-Sha1:
04defc6b604f4324962dffe506f1d8ffcd8c1e1d 3721 python3.13_3.13.5-2+deb13u3.dsc
11afa083b71c9f1b5e03a35ba0a7a7525f9255ca 295440 python3.13_3.13.5-2+deb13u3.debian.tar.xz
a289325ba76f9b89be35137214e1dc59ff8198fe 9914 python3.13_3.13.5-2+deb13u3_source.buildinfo
Checksums-Sha256:
2f6c3f83cd3de0355f4411807871a95f99a0aae9b397daba5dbdbf1bd5169cc8 3721 python3.13_3.13.5-2+deb13u3.dsc
8e9ed35b583e093f80fbcd53bf3de9245c8070cc5ea9b36e5f34d3a45bff73e9 295440 python3.13_3.13.5-2+deb13u3.debian.tar.xz
dd4e76440279d5275e2661dad7e2657ce5b7c05f1164235a3361d16fda7f824e 9914 python3.13_3.13.5-2+deb13u3_source.buildinfo
Files:
7a825a024e6be72b2d096daf406f0312 3721 python optional python3.13_3.13.5-2+deb13u3.dsc
d83b9e9c7ba756c6a2b3a8369d7bbbd5 295440 python optional python3.13_3.13.5-2+deb13u3.debian.tar.xz
955bf77430750e4ce1c003b11239940f 9914 python optional python3.13_3.13.5-2+deb13u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCai1myxQcc3RlZmFub3JA
ZGViaWFuLm9yZwAKCRBHew2wJjpU2AAFAQC/F3JT85w/cv6uDk751KeuNCyReRNY
QlgvM6qnf0RDWAEAtEsiiy6Qh1nU40oAxt3nouclvdjzC+Ex3530ULUFjAM=
=nhAp
-----END PGP SIGNATURE-----
Attachment:
pgpMYzEoOZ2cc.pgp
Description: PGP signature