Release Info

Advisory: CLSA-2026:1771328555

OS: Debian 13

Public date: 2026-02-17 11:42:38.419765

Project: python

Version: 3.8.20-7

Errata link: https://errata.tuxcare.com/els_alt_python/debian13/CLSA-2026-1771328555.html

Changelog

* SECURITY UPDATE: Memory denial of service in plistlib - debian/patches/CVE-2025-13837.patch: read large data by chunks, therefore the upper limit of consumed memory is proportional to the size of the input file. - CVE-2025-13837

Update

Update command: apt-get update apt-get --only-upgrade install alt-python*

Packages list

alt-python38_3.8.20-7_amd64.deb alt-python38-debug_3.8.20-7_amd64.deb alt-python38-devel_3.8.20-7_amd64.deb alt-python38-idle_3.8.20-7_amd64.deb alt-python38-libs_3.8.20-7_amd64.deb alt-python38-test_3.8.20-7_amd64.deb alt-python38-tkinter_3.8.20-7_amd64.deb

CVEs

CVE-2025-13837