Files
buildroot/package/python3/python3.hash
Bernd Kuhls 9ae99d19b9 package/python3: security bump version to 3.13.10
For release notes of this bugfix release, see [1].
While the release notes [1] does not mention any security fixes,
the more detailed change log at [2] has a security section:

- gh-139700: "Check consistency of the zip64 end of central directory
  record." refers to CVE-2025-8291 [3],
- gh-136065: "Fix quadratic complexity in os.path.expandvars()."
  refers to CVE-2025-6075 [4],
- gh-119342: "Fix a potential memory denial of service in the
  plistlib module." refers to CVE-2025-13837 [5].

Fixes:
- [3], [4] and [5].

[1] https://www.python.org/downloads/release/python-31310/
[2] https://docs.python.org/release/3.13.10/whatsnew/changelog.html#security
[3] https://www.cve.org/CVERecord?id=CVE-2025-8291
[4] https://www.cve.org/CVERecord?id=CVE-2025-6075
[5] https://www.cve.org/CVERecord?id=CVE-2025-13837

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
[Julien: add info in commit log about CVEs]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-04 17:58:04 +01:00

6 lines
320 B
Plaintext

# From https://www.python.org/downloads/release/python-31310/
md5 5ada33c7f08d5d2df881657bdb8e848d Python-3.13.10.tar.xz
# Locally computed
sha256 bc673c04375a1a3f0808c27ba8f0411ab811ad390a8740318ccb9c60fad8fd77 Python-3.13.10.tar.xz
sha256 78b12c3a81360b357002334f0e70ea0e92eebf7a9b358805c03c48484945f3bb LICENSE