On Thu, Jul 16, 2026 at 06:42:20PM -0300, Stefano Rivera wrote: > Package: release.debian.org > Severity: normal > Tags: trixie > X-Debbugs-Cc: [email protected], [email protected] > Control: affects -1 + src:python3.13 > User: [email protected] > Usertags: pu > > Given the impact, this should go into trixie-updates. > > Sorry, python3.13/3.13.5-2+deb13u3 had a use-after-free error, resulting > in heap corruption, that trips up a number of users. See bug #1141977 > for user reports. > > Zigo mentioned to me that it broke nova's test suite, and I verified > this.
Thank you Stefano and SRM for handling this so quickly! I'd like to note that the breakage is a little bit bigger than nova's test suite and the documentation for python3.13 itself. After an archive rebuild for Debian 13.6, I found at least 20 packages with FTBFS issues due to this bug (the 19 packages in the affects field for Bug #1141977, plus src:python3.13 itself). So I wonder if it would be feasible/possible (for this one time) to release Debian 13.7 a little bit before the initially planned date of 2026-09-12? Thanks.
