Debian 12: python3-requests Significant Update CVEs 2025

This is a JavaScript bundler and minifier. It packages up JavaScript and TypeScript code for distribution on the web. Update Information : Rebuild for CVEs

This is a JavaScript bundler and minifier. It packages up JavaScript and

TypeScript code for distribution on the web.

* Sun Dec 21 2025 W. Michael Petullo - 0.24.2-6 - Rebuild for CVEs

* Sun Dec 21 2025 W. Michael Petullo - 0.24.2-6 - Rebuild for CVEs

[ 1 ] Bug #2408203 - CVE-2025-58189 golang-github-evanw-esbuild: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2409673 - CVE-2025-61723 golang-github-evanw-esbuild: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] [ 3 ] Bug #2410625 - CVE-2025-58185 golang-github-evanw-esbuild: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] [ 4 ] Bug #2411522 - CVE-2025-58188 golang-github-evanw-esbuild: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

[ 1 ] Bug #2408203 - CVE-2025-58189 golang-github-evanw-esbuild: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2409673 - CVE-2025-61723 golang-github-evanw-esbuild: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] [ 3 ] Bug #2410625 - CVE-2025-58185 golang-github-evanw-esbuild: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] [ 4 ] Bug #2411522 - CVE-2025-58188 golang-github-evanw-esbuild: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4068748872' at the command line. For more information, refer to the dnf documentation available at