[ubuntu/mantic-updates] python3.11 3.11.6-3ubuntu0.1 (Accepted)

Tue Jul 9 15:00:16 UTC 2024

python3.11 (3.11.6-3ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: incorrect permission assignment
    - debian/patches/CVE-2023-6597.patch: fix symlink bug in cleanup.
    - CVE-2023-6597
  * SECURITY UPDATE: Zip-Bombs with overlap entries
    - debian/patches/CVE-2024-0450.patch: Protect zipfile from
      "quoted-overlap" zipbomb. Raise BadZipFile when try to read an
      entry that overlaps with other entry or central directory.
    - CVE-2024-0450

Date: 2024-04-28 22:08:08.704442+00:00
Changed-By: Allen Huang <allen.huang at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.