FEDORA-2026-1fd21102d1 — security update for python3.14

stable

python3.14-3.14.4-2.fc42

FEDORA-2026-1fd21102d1 created by churchyard 4 months ago for Fedora 42

Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100

New minor version of the alternate Python interpreter

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-1fd21102d1

This update has been submitted for testing by churchyard.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has obsoleted python3.14-3.14.4-1.fc42, and has inherited its bugs and notes.

4 months ago

churchyard edited this update.

4 months ago

This update has been pushed to testing.

4 months ago

This update has been submitted for stable by bodhi.

4 months ago

This update has been pushed to stable.

4 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-1

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

modified

4 months ago

approved

4 months ago

Builds

python3.14-3.14.4-2.fc42

BZ#2457944 CVE-2026-1502 python3.14: Python: HTTP header injection via CR/LF in proxy tunnel headers [fedora-all]

BZ#2458016 CVE-2026-6100 python3.14: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all]

BZ#2458224 CVE-2026-4786 python3.14: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all]

BZ#2458488 CVE-2026-5713 python3.14: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. [fedora-all]

python3.14-3.14.4-2.fc42

Automated Test Results

ignored