Packages / Debian 12 (Bookworm) / python / pypy3-tk

Package: pypy3-tk (7.3.11+dfsg-2+deb12u3)

Tkinter module for PyPy (an alternative Python 3.x interpreter)

Other Packages Related to pypy3-tk:

dep: [pypy3] (= 7.3.11+dfsg-2+deb12u3)
fast alternative implementation of Python 3.x - PyPy interpreter
dep: [libtcl8.6] (>= 8.6.0)
Tcl (the Tool Command Language) v8.6 - run-time library files
dep: [libtk8.6] (>= 8.6.0)
Tk toolkit for Tcl and X11 v8.6 - run-time files

Download pypy3-tk

Architecture	Package size	Installed size	Files	Package
amd64	42 KiB	171 KiB	list of files	Download
arm64	42 KiB	211 KiB	list of files	Download

Percorsi file del pacchetto (9)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/lib/pypy3.9/_tkinter/app.py
/usr/lib/pypy3.9/_tkinter/__init__.py
/usr/lib/pypy3.9/_tkinter/tclobj.py
/usr/lib/pypy3.9/_tkinter/tklib_build.py
/usr/lib/pypy3.9/_tkinter/tklib_cffi.pypy39-pp73-aarch64-linux-gnu.so
/usr/lib/pypy3.9/_tkinter/tklib_cffi.pypy39-pp73-x86_64-linux-gnu.so
/usr/share/doc/pypy3-tk/changelog.Debian.gz
/usr/share/doc/pypy3-tk/copyright
/usr/share/doc/pypy3-tk/NEWS.Debian.gz

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 12 (Bookworm) nel browser Crea un'immagine che include pypy3-tk

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
7.3.11+dfsg-2+deb12u3	bookworm / main	amd64	Debian 12 · main · amd64	42 KiB	171 KiB	pool/main/p/pypy3/pypy3-tk_7.3.11+dfsg-2+deb12u3_amd64.deb
7.3.11+dfsg-2+deb12u3	bookworm / main	arm64	Debian 12 · main · arm64	42 KiB	211 KiB	pool/main/p/pypy3/pypy3-tk_7.3.11+dfsg-2+deb12u3_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-114583] jython: CVE-2026-114583	Medium(6.9)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata dsa · pypy3 · debian · bookworm `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata dsa · pypy3 · debian · bookworm
[CVE-2026-19553] ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname arg	High(7.6)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-19445] A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certif	Critical(9.2)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-12345] The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of	Medium(6.3)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm
[CVE-2026-76875] PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt memory by supplying a craf	Medium(6.3)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-15806] The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matchi	Medium(6)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-17084] The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior w	Medium(6.5)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-18503] Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().	Low(3.3)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm
[CVE-2026-6879] `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-ta	Low(3.7)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-11972] When using the "tarfile" module with a file opened in "streaming mode" (mode="r\|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.	High(8.2)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-0864] When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file could be injected with unexpected keys and v	High(7.5)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-8328] The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeer	Medium(5.9)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-6019] http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the gene	High(8.7)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-1502] CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.	Medium(5.7)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-4519] The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended t	High(7.1)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-3479] pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.	Low(3.3)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2025-69534] Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Ma	High(8.2)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-2297] The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.aud	Medium(5.7)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata nvd · pypy3 · debian · bookworm; nvd · pypy3 · debian · 12
[CVE-2026-1299] Python vulnerabilities	High(8.2)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12 `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12
[CVE-2025-12781] pypy3: CVE-2025-12781	Low(3.3)	Interessata Dettagli (2) `7.3.11+dfsg-2+deb12u3` · amd64 · bookworm Interessata dsa · pypy3 · debian · bookworm `7.3.11+dfsg-2+deb12u3` · arm64 · bookworm Interessata dsa · pypy3 · debian · bookworm

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 4:19:28 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

7.3.11+dfsg-2+deb12u3 / amd64Osservato Sep 1, 2026sha256 a884fdd128d9…024162a6Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): a884fdd128d9ea64828fc0b3c4d3bdf5442471861e23be581926f627024162a6

Verifica download

printf '%s  %s\n' 'a884fdd128d9ea64828fc0b3c4d3bdf5442471861e23be581926f627024162a6' 'pypy3-tk_7.3.11+dfsg-2+deb12u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

7.3.11+dfsg-2+deb12u3 / arm64Osservato Sep 1, 2026sha256 309fa9c9b3e5…bd4e3010Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 309fa9c9b3e5df8430a63c88bc4e17cf29ea111da3dcfc1c9e873741bd4e3010

Verifica download

printf '%s  %s\n' '309fa9c9b3e5df8430a63c88bc4e17cf29ea111da3dcfc1c9e873741bd4e3010' 'pypy3-tk_7.3.11+dfsg-2+deb12u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fonti

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified