-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 31 Oct 2025 08:04:59 +0100 Source: pypy3 Architecture: source Version: 7.3.5+dfsg-2+deb11u5 Distribution: bullseye-security Urgency: medium Maintainer: Stefano Rivera <[email protected]> Changed-By: Andrej Shadura <[email protected]> Changes: pypy3 (7.3.5+dfsg-2+deb11u5) bullseye-security; urgency=medium . * Apply security patches for CVEs in the standard library: * CVE-2024-6232: TarFile header parsing was vulnerable to ReDoS * CVE-2024-6923: The email module didn’t properly quote newlines for email headers allowing injections. * CVE-2024-7592: HTTP cookie parser incorrectly processed backslashes resulting in excessive CPU usage. * CVE-2024-11168 and CVE-2025-0938: Process square brackets in URLs according to RFC 3986. * CVE-2025-1795: Separating comma could be Unicode-encoded * CVE-2025-6069: html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs * CVE-2025-8291: zipfile module did not check consistency of the zip64 end of central directory record. Checksums-Sha1: 94b2c84df66b4aabb18f4c3fd0f816c9d0a1e78c 2200 pypy3_7.3.5+dfsg-2+deb11u5.dsc 0f40fd6182bfbf4a872d031e7b2ee7df3bb19090 92556 pypy3_7.3.5+dfsg-2+deb11u5.debian.tar.xz 8fd9eaecd2fc550b820c3c37bf17aa4dfefba41b 8879 pypy3_7.3.5+dfsg-2+deb11u5_source.buildinfo Checksums-Sha256: a3c28e7ac986a27f8ad4fe08222b913dadf03b35b40f6afce7f45efc1846d19e 2200 pypy3_7.3.5+dfsg-2+deb11u5.dsc afd3fc6ea4ea821fdb4a298237fe6b6358fd4f22142341a1929ad7fd32985b00 92556 pypy3_7.3.5+dfsg-2+deb11u5.debian.tar.xz 62e1de5bc0116ffb9796ba2d6fb4ff575662f9e504960f95c46ecaa7b657a5c4 8879 pypy3_7.3.5+dfsg-2+deb11u5_source.buildinfo Files: 913270f1e2e3f21400aec3fe26305bbd 2200 python optional pypy3_7.3.5+dfsg-2+deb11u5.dsc 6e16baf0e3aaa68c133e6b256d01cac1 92556 python optional pypy3_7.3.5+dfsg-2+deb11u5.debian.tar.xz 0c4d48040440f511ef665c9038a0421e 8879 python optional pypy3_7.3.5+dfsg-2+deb11u5_source.buildinfo
-----BEGIN PGP SIGNATURE----- wr0EARYKAG8FgmkEYAIJEOhEa0rIx3JhRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z LnNlcXVvaWEtcGdwLm9yZ6Zz/DIJ+moyMcKD5Tm8Oid1onvFppiYBA4rnlsASdYM FiEEg9zRf0SyLMg2Vu2h6ERrSsjHcmEAAPSaAQCSivHI5HOqELtXVksRXyA3CBz2 IJnjHv0z1CR9XbF63AD/QBQ435GwyCrny4Ok9dfiX/CQXUJ4+QWbhww0RcW+RA8= =mamS -----END PGP SIGNATURE-----
pgpkPI6X7Jhoy.pgp
Description: PGP signature
