ELA-1350-1 pypy security update

multiple vulnerabilities

2025-03-14
Packagepypy
Version5.6.0+dfsg-4+deb9u2 (stretch), 7.0.0+dfsg-3+deb10u2 (buster)
Related CVEs CVE-2023-27043 CVE-2024-5642 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2024-11168 CVE-2025-0938


Multiple vulnerabilities were discovered in PyPy, a fast, compliant alternative implementation of the Python language.

All fixed vulnerabilities come from embedded code copies.

For vulnerabilities from the python2.7 standard library, please refer to ELA-1349-1.



For Debian 10 buster, these problems have been fixed in version 7.0.0+dfsg-3+deb10u2.

For Debian 9 stretch, these problems have been fixed in version 5.6.0+dfsg-4+deb9u2.

We recommend that you upgrade your pypy packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.