-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 25 Aug 2026 16:56:38 +0800 Source: freecad Binary: freecad-python3 freecad-python3-dbgsym libfreecad-python3 libfreecad-python3-dbgsym Architecture: s390x Version: 1.0.0+dfsg-8+deb13u3 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Aron Xu Description: freecad-python3 - Extensible Open Source CAx program - Python 3 binaries libfreecad-python3 - Extensible Open Source CAx program - Python 3 library files Changes: freecad (1.0.0+dfsg-8+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2026-34398, CVE-2026-34399: arbitrary Python code execution via eval() on untrusted input in the BIM workbench * CVE-2026-34789: restrict imports to modules located under FreeCAD's own Mod and macro directories. * CVE-2026-73233: the escaping helper in the FEM displacement constraint task dialog neutralised quotation marks but not backslashes, allowing Python code injection through a crafted displacement formula. * CVE-2026-73235: the Xerces SAX2 reader for FCStd Document.xml resolved external entities and loaded external DTDs, allowing local file disclosure via file: URIs and SSRF via http: URIs. * CVE-2026-73234: PropertyFileIncluded::Restore() concatenated an attacker-controlled file attribute from Document.xml with the document transient path without rejecting directory components, absolute paths or parent references, so a crafted FCStd archive could write anywhere the user can write. Checksums-Sha1: 8f0a5d7985c1ea3bc6f7aa42b36cbe457fd72bf8 1039300 freecad-python3-dbgsym_1.0.0+dfsg-8+deb13u3_s390x.deb 04bea5dae077e6ca351edae79c2c72867376a645 95672 freecad-python3_1.0.0+dfsg-8+deb13u3_s390x.deb ee2240b1e6f1bc827f110619d5ff13ef40419938 35097 freecad_1.0.0+dfsg-8+deb13u3_s390x-buildd.buildinfo 72049585e1ebc14f7a54fa5e74d231c95783f913 542352616 libfreecad-python3-dbgsym_1.0.0+dfsg-8+deb13u3_s390x.deb 6b6cc9f2c02d848f20c57d4df815ebeb36eb0d6b 58408852 libfreecad-python3_1.0.0+dfsg-8+deb13u3_s390x.deb Checksums-Sha256: e3e97b444838b543ddec343ddf4a49ee47f8dabbf266e4eba89ed6d24c0fd9f0 1039300 freecad-python3-dbgsym_1.0.0+dfsg-8+deb13u3_s390x.deb c2008bf47933c2856c7fb18a9ecb4940cc6b5b50b1d0300df4e22b7840323bd3 95672 freecad-python3_1.0.0+dfsg-8+deb13u3_s390x.deb 4f3860ff486f437a73c4d384e5ea5768d7c2af6ce379abcfcdb9e56526c07733 35097 freecad_1.0.0+dfsg-8+deb13u3_s390x-buildd.buildinfo 99a3d8e26d82c545cbbd51aa70368dc77cb56cafa84af7dc2eddae32f7034fc6 542352616 libfreecad-python3-dbgsym_1.0.0+dfsg-8+deb13u3_s390x.deb f88b5844135eef1b613daa569fb682f25d9119e20d91528994f0cc66bce38a60 58408852 libfreecad-python3_1.0.0+dfsg-8+deb13u3_s390x.deb Files: cc231cdf06cae339795577a491e75d0d 1039300 debug optional freecad-python3-dbgsym_1.0.0+dfsg-8+deb13u3_s390x.deb c390f2dab73348acc121b9286e998038 95672 science optional freecad-python3_1.0.0+dfsg-8+deb13u3_s390x.deb 1609574147898f64e7629d33033c67cf 35097 science optional freecad_1.0.0+dfsg-8+deb13u3_s390x-buildd.buildinfo 11348a652496f42ef6f87eb375b91025 542352616 debug optional libfreecad-python3-dbgsym_1.0.0+dfsg-8+deb13u3_s390x.deb 2fe21cd6006a0fd871fbe42c349949e8 58408852 libs optional libfreecad-python3_1.0.0+dfsg-8+deb13u3_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfUKc1SwkyxlVJBiWHOd5r2LlPicFAmqNra0ACgkQHOd5r2Ll PifROg//YtWgOy0xfxnl4G+V/UOouF3jY9idVYVR+mmfgR2d3Ai7XdV+m7YTYQ3i sggRuK/c+Gvfjzx6IDBgMjARNOrK2P5bvmVfTaokZwYkaqSIhRvVnSlATQylZA1z FNNS8+tW6rPQGxKS7zoIpN+QahRxeXE/nAc0Qqm7lg1WSosfOMMK/vyI/eu9xv6i Do6WgoeY6He8bbbutKOhLJiQpKNpcc7WpphSnO0hnoKLOkD6hPpRJHwoVsae+0aw hYJ8nabWXZ80cNHcw4SR3QHUWeYzBDBLFo2x6QOFvRqPAb08+nGpgm6YemejPlQr KfEkxuRdvCNReetTLKfAnrCvfgQ5LdF06QfG68cZu8OzPetaf2X0D2D2LQiUUe1x DK2lnTBPLyuUnoKk9eCObCf38GMGkP1hxwzsCJbXej4U9olMngeJpdrjOnuwQeOm C4zxKlW5pYfG9aS0f+doW9OA0AN7Rx7DdpNvbiWsUHfjUUlXM24wXIwfD/IK6NB5 ZJNIW6lttDA1O1/CV7QT3FJ6qP8ZYE53dvgGJu7oJwpWjsk/YLrl/iCclrM6wuYb bx5tFnghCV4IRisKwpZSQk13QCEtO2R1GJHVZ3+a/3w5VUl52tv8rAgfcZjrZQjk holICSOfW4yiqRSmWtlDfzzb/550R4/0WVN++5r4ZnKC78xhfbw= =M8Pm -----END PGP SIGNATURE-----