Release Info

Advisory: CLSA-2026:1771329439

OS: Debian 12

Public date: 2026-02-17 11:57:22.253351

Project: python

Version: 3.7.17-10

Errata link: https://errata.tuxcare.com/els_alt_python/debian12/CLSA-2026-1771329439.html

Changelog

* SECURITY UPDATE: Memory denial of service in plistlib - debian/patches/CVE-2025-13837.patch: read large data by chunks, therefore the upper limit of consumed memory is proportional to the size of the input file. - CVE-2025-13837

Update

Update command: apt-get update apt-get --only-upgrade install alt-python*

Packages list

alt-python37_3.7.17-10_amd64.deb alt-python37-debug_3.7.17-10_amd64.deb alt-python37-devel_3.7.17-10_amd64.deb alt-python37-libs_3.7.17-10_amd64.deb alt-python37-test_3.7.17-10_amd64.deb alt-python37-tkinter_3.7.17-10_amd64.deb alt-python37-tools_3.7.17-10_amd64.deb

CVEs

CVE-2025-13837