-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Jun 2026 14:54:31 -0400 Source: python3.14 Architecture: source Version: 3.14.6-1 Distribution: unstable Urgency: medium Maintainer: Matthias Klose <doko@debian.org> Changed-By: Stefano Rivera <stefanor@debian.org> Closes: 1101810 1109449 1139593 Changes: python3.14 (3.14.6-1) unstable; urgency=medium . * Python 3.14.6 release. - Avoid crash decompressing untrusted bz2 data. CVE-2026-9669. - Don't trust server-provided passive connection addresses in ftplib. CVE-2026-8328. - Don't allow untrusted tarfile extraction to write outside the destination. CVE-2026-7774. - Protects against DoS in expat XML parsing. CVE-2026-7210. - Avoid DoS in unicode normalization. CVE-2026-3276. . [ Colin Watson ] * Drop libnsl-dev build-dependency, which is superfluous since the nis module was removed in Python 3.13. . [ Stefano Rivera ] * Refresh patches. * Drop mention of gdbinit from README.debug. Closes: #1109449. * Tidy up python3.X-config manpage. Closes: #1101810. * Build with -fno-thread-jumps, instead of -O1 on m68k. Closes: #1139593 Checksums-Sha1: 970b7b3e0b42d86bd4812cc8c37b0c31aa16e37a 3480 python3.14_3.14.6-1.dsc 064b06388d8911f337a023badc7c34a199787a25 23921184 python3.14_3.14.6.orig.tar.xz a8289bd8d712b3aac3b553e7b759abbd8114f184 223848 python3.14_3.14.6-1.debian.tar.xz 5dd03c8a9dc67c15d30a444fa328a667ff7c4f32 10115 python3.14_3.14.6-1_source.buildinfo Checksums-Sha256: 809f3f0fa57c5bb981f38f411ae0f298afd766046293eff98cebef69e5a4c508 3480 python3.14_3.14.6-1.dsc 143b1dddefaec3bd2e21e3b839b34a2b7fb9842272883c576420d605e9f30c63 23921184 python3.14_3.14.6.orig.tar.xz 846e53dd7568f3b20de49ae829b1282d4e1b36755f8ef3802f68b4bbc54f4a1c 223848 python3.14_3.14.6-1.debian.tar.xz c1659978f46cae49b82b45b9182796e7ee0fa091bf692541ba05665625e5ad2d 10115 python3.14_3.14.6-1_source.buildinfo Files: db8116771993c4fb544c0d5945ba705d 3480 python optional python3.14_3.14.6-1.dsc d28d7fb81a61d3bff5a6bedceb969366 23921184 python optional python3.14_3.14.6.orig.tar.xz 605860cb839b11faf0ac85291db184dd 223848 python optional python3.14_3.14.6-1.debian.tar.xz f07293ccac3e9529fe8a79a28cb03898 10115 python optional python3.14_3.14.6-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCaioX7BQcc3RlZmFub3JA ZGViaWFuLm9yZwAKCRBHew2wJjpU2IJxAPoD7/yoYRj8Rh7cj6lVicFr3PVG6EnN O0rDox0HwYkNtwEAgNFm5ZqAALyEAuoN/yl68s8zBJc59AHBaZTVWDd6UA8= =Vcld -----END PGP SIGNATURE-----