FEDORA-2026-a5ba8297fd — security update for python3.11

stable

python3.11-3.11.15-4.fc45

FEDORA-2026-a5ba8297fd created by cstratak 3 months ago for Fedora 45

Automatic update for python3.11-3.11.15-4.fc45.

Changelog

* Fri Apr 17 2026 Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204
* Sat Apr 11 2026 Miro Hrončok <mhroncok@redhat.com> - 3.11.15-3
- Explicitly build with OpenSSL 3

This update was automatically created

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has been submitted for stable by bodhi

3 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

0 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

approved

3 months ago

Builds

python3.11-3.11.15-4.fc45

BZ#2444704 CVE-2026-2297 python3.11: CPython: Logging Bypass in Legacy .pyc File Handling [fedora-all]

BZ#2448188 CVE-2026-3644 python3.11: Incomplete control character validation in http.cookies [fedora-all]

BZ#2448204 CVE-2026-4224 python3.11: Stack overflow parsing XML with deeply nested DTD content models [fedora-all]

BZ#2457941 CVE-2026-1502 python3.11: Python: HTTP header injection via CR/LF in proxy tunnel headers [fedora-all]

BZ#2458013 CVE-2026-6100 python3.11: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all]

BZ#2458221 CVE-2026-4786 python3.11: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all]

python3.11-3.11.15-4.fc45

Automated Test Results

ignored