Release Info

Advisory: CLSA-2026:1771328775

OS: Debian 12

Public date: 2026-02-17 11:46:18.609945

Project: python

Version: 3.8.20-7

Errata link: https://errata.tuxcare.com/els_alt_python/debian12/CLSA-2026-1771328775.html

Changelog

* SECURITY UPDATE: Memory denial of service in plistlib - debian/patches/CVE-2025-13837.patch: read large data by chunks, therefore the upper limit of consumed memory is proportional to the size of the input file. - CVE-2025-13837

Update

Update command: apt-get update apt-get --only-upgrade install alt-python*

Packages list

alt-python38_3.8.20-7_amd64.deb alt-python38-debug_3.8.20-7_amd64.deb alt-python38-devel_3.8.20-7_amd64.deb alt-python38-idle_3.8.20-7_amd64.deb alt-python38-libs_3.8.20-7_amd64.deb alt-python38-test_3.8.20-7_amd64.deb alt-python38-tkinter_3.8.20-7_amd64.deb

CVEs

CVE-2025-13837