FEDORA-2026-bb0e94c26c — security update for python3.12

stable

python3.12-3.12.13-3.fc44

FEDORA-2026-bb0e94c26c created by cstratak 3 months ago for Fedora 44

Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-bb0e94c26c

This update has been submitted for testing by cstratak.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has been pushed to testing.

3 months ago

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

approved

3 months ago

Builds

python3.12-3.12.13-3.fc44

BZ#2444705 CVE-2026-2297 python3.12: CPython: Logging Bypass in Legacy .pyc File Handling [fedora-all]

BZ#2448189 CVE-2026-3644 python3.12: Incomplete control character validation in http.cookies [fedora-all]

BZ#2448205 CVE-2026-4224 python3.12: Stack overflow parsing XML with deeply nested DTD content models [fedora-all]

BZ#2457942 CVE-2026-1502 python3.12: Python: HTTP header injection via CR/LF in proxy tunnel headers [fedora-all]

BZ#2458014 CVE-2026-6100 python3.12: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all]

BZ#2458222 CVE-2026-4786 python3.12: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all]

python3.12-3.12.13-3.fc44

Automated Test Results

ignored