[ubuntu/noble-security] python3.12 3.12.3-1ubuntu0.9 (Accepted)
Hlib Korzhynskyy
hlib.korzhynskyy at canonical.com
Mon Nov 24 14:22:32 UTC 2025
python3.12 (3.12.3-1ubuntu0.9) noble-security; urgency=medium
* SECURITY UPDATE: Possible payload obfuscation
- debian/patches/CVE-2025-8291.patch: check consistency of
the zip64 end of central dir record in Lib/zipfile.py,
Lib/test/test_zipfile.py.
- CVE-2025-8291
* SECURITY UPDATE: Performance degradation
- debian/patches/CVE-2025-6075.patch: fix quadratic complexity
in os.path.expandvars() in Lib/ntpatch.py, Lib/posixpath.py,
Lib/test/test_genericpatch.py, Lib/test/test_npath.py.
- CVE-2025-6075
Date: 2025-11-12 21:01:34.792097+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
https://launchpad.net/ubuntu/+source/python3.12/3.12.3-1ubuntu0.9
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list