FEDORA-2026-3ebfc12a16 — security update for python3.12

stable

python3.12-3.12.13-1.fc42

FEDORA-2026-3ebfc12a16 created by thrnciar 4 months ago for Fedora 42

Update to 3.12.13

Security fixes for CVE-2026-1299, CVE-2026-0865, CVE-2025-15366 and CVE-2025-15367

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-3ebfc12a16

This update has been submitted for testing by thrnciar.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has obsoleted python3.12-3.12.12-4.fc42, and has inherited its bugs and notes.

4 months ago

This update has been pushed to testing.

4 months ago

This update has been submitted for stable by bodhi.

4 months ago

This update has been pushed to stable.

4 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

approved

4 months ago

Builds

python3.12-3.12.13-1.fc42

BZ#2431617 CVE-2025-15366 python3.12: IMAP command injection in user-controlled commands [fedora-42]

BZ#2431641 CVE-2025-15367 python3.12: POP3 command injection in user-controlled commands [fedora-42]

BZ#2431764 CVE-2025-11468 python3.12: Missing character filtering in Python [fedora-42]

BZ#2431787 CVE-2026-0672 python3.12: Header injection in http.cookies.Morsel in Python [fedora-42]

BZ#2431793 CVE-2026-0865 python3.12: wsgiref.headers.Headers allows header newline injection in Python [fedora-42]

BZ#2431808 CVE-2025-15282 python3.12: Header injection via newlines in data URL mediatype in Python [fedora-42]

BZ#2433817 CVE-2026-1299 python3.12: email header injection due to unquoted newlines [fedora-42]

python3.12-3.12.13-1.fc42

Automated Test Results

ignored