Packages / Debian 12 (Bookworm) / python / libpython3.11-minimal

Package: libpython3.11-minimal (3.11.2-6+deb12u8)

Minimal subset of the Python language (version 3.11)

Other Packages Related to libpython3.11-minimal:

dep: [libc6] (>= 2.14)
GNU C Library: Shared libraries
dep: [libssl3] (>= 3.0.0)
toolkit Secure Sockets Layer - librerie condivise

rec: [libpython3.11-stdlib]
Interactive high-level object-oriented language (standard library, version 3.11)

Download libpython3.11-minimal

Architecture	Package size	Installed size	Files	Package
amd64	796 KiB	5.1 MiB	list of files	Download
arm64	789 KiB	5.1 MiB	list of files	Download

Percorsi file del pacchetto (285)

Showing the first 250 sorted package-associated paths. Use file search to locate a specific path.

/etc/python3.11/sitecustomize.py
/usr/lib/python3.11/abc.py
/usr/lib/python3.11/argparse.py
/usr/lib/python3.11/ast.py
/usr/lib/python3.11/base64.py
/usr/lib/python3.11/bisect.py
/usr/lib/python3.11/calendar.py
/usr/lib/python3.11/codecs.py
/usr/lib/python3.11/collections/abc.py
/usr/lib/python3.11/_collections_abc.py
/usr/lib/python3.11/collections/__init__.py
/usr/lib/python3.11/_compat_pickle.py
/usr/lib/python3.11/compileall.py
/usr/lib/python3.11/configparser.py
/usr/lib/python3.11/contextlib.py
/usr/lib/python3.11/copy.py
/usr/lib/python3.11/copyreg.py
/usr/lib/python3.11/csv.py
/usr/lib/python3.11/datetime.py
/usr/lib/python3.11/dis.py
/usr/lib/python3.11/email/architecture.rst
/usr/lib/python3.11/email/base64mime.py
/usr/lib/python3.11/email/charset.py
/usr/lib/python3.11/email/contentmanager.py
/usr/lib/python3.11/email/_encoded_words.py
/usr/lib/python3.11/email/encoders.py
/usr/lib/python3.11/email/errors.py
/usr/lib/python3.11/email/feedparser.py
/usr/lib/python3.11/email/generator.py
/usr/lib/python3.11/email/header.py
/usr/lib/python3.11/email/headerregistry.py
/usr/lib/python3.11/email/_header_value_parser.py
/usr/lib/python3.11/email/__init__.py
/usr/lib/python3.11/email/iterators.py
/usr/lib/python3.11/email/message.py
/usr/lib/python3.11/email/mime/application.py
/usr/lib/python3.11/email/mime/audio.py
/usr/lib/python3.11/email/mime/base.py
/usr/lib/python3.11/email/mime/image.py
/usr/lib/python3.11/email/mime/__init__.py
/usr/lib/python3.11/email/mime/message.py
/usr/lib/python3.11/email/mime/multipart.py
/usr/lib/python3.11/email/mime/nonmultipart.py
/usr/lib/python3.11/email/mime/text.py
/usr/lib/python3.11/email/_parseaddr.py
/usr/lib/python3.11/email/parser.py
/usr/lib/python3.11/email/_policybase.py
/usr/lib/python3.11/email/policy.py
/usr/lib/python3.11/email/quoprimime.py
/usr/lib/python3.11/email/utils.py
/usr/lib/python3.11/encodings/aliases.py
/usr/lib/python3.11/encodings/ascii.py
/usr/lib/python3.11/encodings/base64_codec.py
/usr/lib/python3.11/encodings/big5hkscs.py
/usr/lib/python3.11/encodings/big5.py
/usr/lib/python3.11/encodings/bz2_codec.py
/usr/lib/python3.11/encodings/charmap.py
/usr/lib/python3.11/encodings/cp037.py
/usr/lib/python3.11/encodings/cp1006.py
/usr/lib/python3.11/encodings/cp1026.py
/usr/lib/python3.11/encodings/cp1125.py
/usr/lib/python3.11/encodings/cp1140.py
/usr/lib/python3.11/encodings/cp1250.py
/usr/lib/python3.11/encodings/cp1251.py
/usr/lib/python3.11/encodings/cp1252.py
/usr/lib/python3.11/encodings/cp1253.py
/usr/lib/python3.11/encodings/cp1254.py
/usr/lib/python3.11/encodings/cp1255.py
/usr/lib/python3.11/encodings/cp1256.py
/usr/lib/python3.11/encodings/cp1257.py
/usr/lib/python3.11/encodings/cp1258.py
/usr/lib/python3.11/encodings/cp273.py
/usr/lib/python3.11/encodings/cp424.py
/usr/lib/python3.11/encodings/cp437.py
/usr/lib/python3.11/encodings/cp500.py
/usr/lib/python3.11/encodings/cp720.py
/usr/lib/python3.11/encodings/cp737.py
/usr/lib/python3.11/encodings/cp775.py
/usr/lib/python3.11/encodings/cp850.py
/usr/lib/python3.11/encodings/cp852.py
/usr/lib/python3.11/encodings/cp855.py
/usr/lib/python3.11/encodings/cp856.py
/usr/lib/python3.11/encodings/cp857.py
/usr/lib/python3.11/encodings/cp858.py
/usr/lib/python3.11/encodings/cp860.py
/usr/lib/python3.11/encodings/cp861.py
/usr/lib/python3.11/encodings/cp862.py
/usr/lib/python3.11/encodings/cp863.py
/usr/lib/python3.11/encodings/cp864.py
/usr/lib/python3.11/encodings/cp865.py
/usr/lib/python3.11/encodings/cp866.py
/usr/lib/python3.11/encodings/cp869.py
/usr/lib/python3.11/encodings/cp874.py
/usr/lib/python3.11/encodings/cp875.py
/usr/lib/python3.11/encodings/cp932.py
/usr/lib/python3.11/encodings/cp949.py
/usr/lib/python3.11/encodings/cp950.py
/usr/lib/python3.11/encodings/euc_jis_2004.py
/usr/lib/python3.11/encodings/euc_jisx0213.py
/usr/lib/python3.11/encodings/euc_jp.py
/usr/lib/python3.11/encodings/euc_kr.py
/usr/lib/python3.11/encodings/gb18030.py
/usr/lib/python3.11/encodings/gb2312.py
/usr/lib/python3.11/encodings/gbk.py
/usr/lib/python3.11/encodings/hex_codec.py
/usr/lib/python3.11/encodings/hp_roman8.py
/usr/lib/python3.11/encodings/hz.py
/usr/lib/python3.11/encodings/idna.py
/usr/lib/python3.11/encodings/__init__.py
/usr/lib/python3.11/encodings/iso2022_jp_1.py
/usr/lib/python3.11/encodings/iso2022_jp_2004.py
/usr/lib/python3.11/encodings/iso2022_jp_2.py
/usr/lib/python3.11/encodings/iso2022_jp_3.py
/usr/lib/python3.11/encodings/iso2022_jp_ext.py
/usr/lib/python3.11/encodings/iso2022_jp.py
/usr/lib/python3.11/encodings/iso2022_kr.py
/usr/lib/python3.11/encodings/iso8859_10.py
/usr/lib/python3.11/encodings/iso8859_11.py
/usr/lib/python3.11/encodings/iso8859_13.py
/usr/lib/python3.11/encodings/iso8859_14.py
/usr/lib/python3.11/encodings/iso8859_15.py
/usr/lib/python3.11/encodings/iso8859_16.py
/usr/lib/python3.11/encodings/iso8859_1.py
/usr/lib/python3.11/encodings/iso8859_2.py
/usr/lib/python3.11/encodings/iso8859_3.py
/usr/lib/python3.11/encodings/iso8859_4.py
/usr/lib/python3.11/encodings/iso8859_5.py
/usr/lib/python3.11/encodings/iso8859_6.py
/usr/lib/python3.11/encodings/iso8859_7.py
/usr/lib/python3.11/encodings/iso8859_8.py
/usr/lib/python3.11/encodings/iso8859_9.py
/usr/lib/python3.11/encodings/johab.py
/usr/lib/python3.11/encodings/koi8_r.py
/usr/lib/python3.11/encodings/koi8_t.py
/usr/lib/python3.11/encodings/koi8_u.py
/usr/lib/python3.11/encodings/kz1048.py
/usr/lib/python3.11/encodings/latin_1.py
/usr/lib/python3.11/encodings/mac_arabic.py
/usr/lib/python3.11/encodings/mac_croatian.py
/usr/lib/python3.11/encodings/mac_cyrillic.py
/usr/lib/python3.11/encodings/mac_farsi.py
/usr/lib/python3.11/encodings/mac_greek.py
/usr/lib/python3.11/encodings/mac_iceland.py
/usr/lib/python3.11/encodings/mac_latin2.py
/usr/lib/python3.11/encodings/mac_romanian.py
/usr/lib/python3.11/encodings/mac_roman.py
/usr/lib/python3.11/encodings/mac_turkish.py
/usr/lib/python3.11/encodings/mbcs.py
/usr/lib/python3.11/encodings/oem.py
/usr/lib/python3.11/encodings/palmos.py
/usr/lib/python3.11/encodings/ptcp154.py
/usr/lib/python3.11/encodings/punycode.py
/usr/lib/python3.11/encodings/quopri_codec.py
/usr/lib/python3.11/encodings/raw_unicode_escape.py
/usr/lib/python3.11/encodings/rot_13.py
/usr/lib/python3.11/encodings/shift_jis_2004.py
/usr/lib/python3.11/encodings/shift_jis.py
/usr/lib/python3.11/encodings/shift_jisx0213.py
/usr/lib/python3.11/encodings/tis_620.py
/usr/lib/python3.11/encodings/undefined.py
/usr/lib/python3.11/encodings/unicode_escape.py
/usr/lib/python3.11/encodings/utf_16_be.py
/usr/lib/python3.11/encodings/utf_16_le.py
/usr/lib/python3.11/encodings/utf_16.py
/usr/lib/python3.11/encodings/utf_32_be.py
/usr/lib/python3.11/encodings/utf_32_le.py
/usr/lib/python3.11/encodings/utf_32.py
/usr/lib/python3.11/encodings/utf_7.py
/usr/lib/python3.11/encodings/utf_8.py
/usr/lib/python3.11/encodings/utf_8_sig.py
/usr/lib/python3.11/encodings/uu_codec.py
/usr/lib/python3.11/encodings/zlib_codec.py
/usr/lib/python3.11/enum.py
/usr/lib/python3.11/filecmp.py
/usr/lib/python3.11/fnmatch.py
/usr/lib/python3.11/functools.py
/usr/lib/python3.11/__future__.py
/usr/lib/python3.11/genericpath.py
/usr/lib/python3.11/getopt.py
/usr/lib/python3.11/glob.py
/usr/lib/python3.11/hashlib.py
/usr/lib/python3.11/heapq.py
/usr/lib/python3.11/importlib/_abc.py
/usr/lib/python3.11/importlib/abc.py
/usr/lib/python3.11/importlib/_bootstrap_external.py
/usr/lib/python3.11/importlib/_bootstrap.py
/usr/lib/python3.11/importlib/__init__.py
/usr/lib/python3.11/importlib/machinery.py
/usr/lib/python3.11/importlib/metadata/_adapters.py
/usr/lib/python3.11/importlib/metadata/_collections.py
/usr/lib/python3.11/importlib/metadata/_functools.py
/usr/lib/python3.11/importlib/metadata/__init__.py
/usr/lib/python3.11/importlib/metadata/_itertools.py
/usr/lib/python3.11/importlib/metadata/_meta.py
/usr/lib/python3.11/importlib/metadata/_text.py
/usr/lib/python3.11/importlib/readers.py
/usr/lib/python3.11/importlib/resources/abc.py
/usr/lib/python3.11/importlib/resources/_adapters.py
/usr/lib/python3.11/importlib/resources/_common.py
/usr/lib/python3.11/importlib/resources/__init__.py
/usr/lib/python3.11/importlib/resources/_itertools.py
/usr/lib/python3.11/importlib/resources/_legacy.py
/usr/lib/python3.11/importlib/resources/readers.py
/usr/lib/python3.11/importlib/resources/simple.py
/usr/lib/python3.11/importlib/simple.py
/usr/lib/python3.11/importlib/util.py
/usr/lib/python3.11/imp.py
/usr/lib/python3.11/inspect.py
/usr/lib/python3.11/io.py
/usr/lib/python3.11/ipaddress.py
/usr/lib/python3.11/keyword.py
/usr/lib/python3.11/lib-dynload/_hashlib.cpython-311-aarch64-linux-gnu.so
/usr/lib/python3.11/lib-dynload/_hashlib.cpython-311-x86_64-linux-gnu.so
/usr/lib/python3.11/lib-dynload/_ssl.cpython-311-aarch64-linux-gnu.so
/usr/lib/python3.11/lib-dynload/_ssl.cpython-311-x86_64-linux-gnu.so
/usr/lib/python3.11/linecache.py
/usr/lib/python3.11/locale.py
/usr/lib/python3.11/logging/config.py
/usr/lib/python3.11/logging/handlers.py
/usr/lib/python3.11/logging/__init__.py
/usr/lib/python3.11/opcode.py
/usr/lib/python3.11/operator.py
/usr/lib/python3.11/optparse.py
/usr/lib/python3.11/os.py
/usr/lib/python3.11/pathlib.py
/usr/lib/python3.11/pickle.py
/usr/lib/python3.11/pkgutil.py
/usr/lib/python3.11/platform.py
/usr/lib/python3.11/posixpath.py
/usr/lib/python3.11/_py_abc.py
/usr/lib/python3.11/py_compile.py
/usr/lib/python3.11/quopri.py
/usr/lib/python3.11/random.py
/usr/lib/python3.11/re/_casefix.py
/usr/lib/python3.11/re/_compiler.py
/usr/lib/python3.11/re/_constants.py
/usr/lib/python3.11/re/__init__.py
/usr/lib/python3.11/re/_parser.py
/usr/lib/python3.11/reprlib.py
/usr/lib/python3.11/runpy.py
/usr/lib/python3.11/selectors.py
/usr/lib/python3.11/signal.py
/usr/lib/python3.11/_sitebuiltins.py
/usr/lib/python3.11/sitecustomize.py
/usr/lib/python3.11/site.py
/usr/lib/python3.11/socket.py
/usr/lib/python3.11/sre_compile.py
/usr/lib/python3.11/sre_constants.py
/usr/lib/python3.11/sre_parse.py
/usr/lib/python3.11/ssl.py

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 12 (Bookworm) nel browser Crea un'immagine che include libpython3.11-minimal

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
3.11.2-6+deb12u8	bookworm / main	amd64	Debian 12 · main · amd64	799 KiB	5.1 MiB	pool/main/p/python3.11/libpython3.11-minimal_3.11.2-6+deb12u8_amd64.deb
3.11.2-6+deb12u8	bookworm / main	arm64	Debian 12 · main · arm64	792 KiB	5.1 MiB	pool/main/p/python3.11/libpython3.11-minimal_3.11.2-6+deb12u8_arm64.deb
3.11.2-6+deb12u3	bookworm-security / main	amd64	Debian 12 security · main · amd64	796 KiB	5.1 MiB	pool/updates/main/p/python3.11/libpython3.11-minimal_3.11.2-6+deb12u3_amd64.deb
3.11.2-6+deb12u3	bookworm-security / main	arm64	Debian 12 security · main · arm64	789 KiB	5.1 MiB	pool/updates/main/p/python3.11/libpython3.11-minimal_3.11.2-6+deb12u3_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-114583] jython: CVE-2026-114583	Medium(6.9)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata dsa · python3.11 · debian · bookworm; dsa · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata dsa · python3.11 · debian · bookworm; dsa · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata dsa · python3.11 · debian · bookworm; dsa · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata dsa · python3.11 · debian · bookworm; dsa · python3.11 · debian · 12
[CVE-2026-19553] ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname arg	High(7.6)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-19445] A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certif	Critical(9.2)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-12345] The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of	Medium(6.3)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm
[CVE-2026-15310] When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.	Medium(6.5)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-15806] The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matchi	Medium(6)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-17084] The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior w	Medium(6.5)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-18503] Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().	Low(3.3)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm
[CVE-2026-6879] `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-ta	Low(3.7)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-15308] The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.	High(8.7)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-11972] When using the "tarfile" module with a file opened in "streaming mode" (mode="r\|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.	High(8.2)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-0864] When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and v	High(7.5)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-11940] tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction f	High(7.8)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-12003] To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modu	High(7.8)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-9669] bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompress	High(8.2)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-3276] unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This	High(7.5)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-8328] The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeer	Medium(5.9)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-7210] `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this	High(7.5)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-6019] http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the gene	High(8.7)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u9` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12
[CVE-2026-6100] Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-us	Critical(9.1)	Interessata Dettagli (4) `3.11.2-6+deb12u8` · amd64 · bookworm Corretta · Corretta: `3.11.2-6+deb12u8` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u8` · arm64 · bookworm Corretta · Corretta: `3.11.2-6+deb12u8` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · amd64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u8` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12 `3.11.2-6+deb12u3` · arm64 · bookworm-security Interessata · Corretta: `3.11.2-6+deb12u8` nvd · python3.11 · debian · bookworm; nvd · python3.11 · debian · 12

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 5:08:52 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.11.2-6+deb12u8 / amd64Osservato Sep 1, 2026sha256 f3beaa03994f…52a4e6f9Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): f3beaa03994ffedacf73c43a0843d53b062d347115d8af65bee2034552a4e6f9

Verifica download

printf '%s  %s\n' 'f3beaa03994ffedacf73c43a0843d53b062d347115d8af65bee2034552a4e6f9' 'libpython3.11-minimal_3.11.2-6+deb12u8_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

3.11.2-6+deb12u8 / arm64Osservato Sep 1, 2026sha256 c48bac178c0f…3ec7cd4bImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): c48bac178c0fc43a2bf8ace784c762b5ee83e2b981894a991dc3ccfd3ec7cd4b

Verifica download

printf '%s  %s\n' 'c48bac178c0fc43a2bf8ace784c762b5ee83e2b981894a991dc3ccfd3ec7cd4b' 'libpython3.11-minimal_3.11.2-6+deb12u8_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

3.11.2-6+deb12u3 / amd64Osservato Sep 1, 2026sha256 36145212b814…a5bc7136Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 36145212b8147327802f658d0a2cbcb04ca7860f9797825b8f832e82a5bc7136

Verifica download

printf '%s  %s\n' '36145212b8147327802f658d0a2cbcb04ca7860f9797825b8f832e82a5bc7136' 'libpython3.11-minimal_3.11.2-6+deb12u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main amd64

3.11.2-6+deb12u3 / arm64Osservato Sep 1, 2026sha256 77b244e4ed2c…34cb227bImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 77b244e4ed2ce3ec3f23cb20ed1613c0cc0caa78bd6a5d305772b3a234cb227b

Verifica download

printf '%s  %s\n' '77b244e4ed2ce3ec3f23cb20ed1613c0cc0caa78bd6a5d305772b3a234cb227b' 'libpython3.11-minimal_3.11.2-6+deb12u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main arm64

Fonti

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified
Debian 12 (Bookworm) security main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Observed SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Result
match verified
Debian 12 (Bookworm) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Observed SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Result
match verified