UbuntuUpdates.org

Package "libpython3.13-stdlib"

Name: libpython3.13-stdlib

Description:

Interactive high-level object-oriented language (standard library, version 3.13)
Latest version: 3.13.0-1ubuntu0.2
Release: oracular (24.10)
Level: updates
Repository: universe
Head package: python3.13

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libpython3.13-stdlib"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libpython3.13-stdlib" in Oracular

Repository Area Version
security universe 3.13.0-1ubuntu0.2

Changelog

Version: 3.13.0-1ubuntu0.2 2025-05-21 23:07:12 UTC

  python3.13 (3.13.0-1ubuntu0.2) oracular-security; urgency=medium

  * SECURITY UPDATE: IPv6 and IPvFuture hosts parsing correction
    - debian/patches/CVE-2025-0938.patch: [3.13] gh-105704: Disallow
      square brackets (`[` and `]`) in domain names for parsed URLs (GH-
      129418) (GH-129526)
    - CVE-2025-0938

 -- John Breton <email address hidden> Wed, 14 May 2025 21:26:23 +0200
Source diff to previous version
CVE-2025-0938 The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid ac

Version: 3.13.0-1ubuntu0.1 2025-05-06 23:08:33 UTC

  python3.13 (3.13.0-1ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Command injection
    - debian/patches/CVE-2024-9287.patch: 00443: gh-124651: Quote
      template strings in `venv` activation scripts
    - CVE-2024-9287

 -- John Breton <email address hidden> Fri, 02 May 2025 10:45:16 -0400
CVE-2024-9287 A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted pro


About   -   Send Feedback to @ubuntu_updates