Repository navigation
Rebuild Python 3.12 Trixie slim image with fixed zlib1g security update #1147
Description
Summary
Could the official Python 3.12 Trixie slim image be rebuilt and republished against the current Debian Trixie security archive so it includes the fixed zlib1g package?
A downstream scan of python:3.12.16-slim-trixie on 2026-11-07 found:
| Package | Installed version | Fixed version | Findings |
|---|---|---|---|
zlib1g |
1:1.3.dfsg+really1.3.1-1+b1 |
1:1.3.dfsg+really1.3.1-1+deb13u1 |
CVE-2026-76844, CVE-2026-85091 (HIGH) |
Debian's security tracker now lists the Trixie fix at 1:1.3.dfsg+really1.3.1-1+deb13u1:
- DSA-6613-1
- CVE-2026-76844
- CVE-2026-85091
- Debian bug #1146895 records the fixed zlib upload.
Would the maintainers be able to trigger/confirm a rebuild of 3.12.16-slim-trixie (and the corresponding 3.12-slim-trixie aliases) so the published multi-architecture image contains the fixed package?
This is a request for the normal official-image rebuild after the Debian security package became available; it is not a request to add an apt-get upgrade workaround to the image Dockerfile.
Thank you for maintaining the Python Official Image.
Activity