FEDORA-2026-dd34c4467b — security update for python3.11

stable

python3.11-3.11.15-4.fc42

FEDORA-2026-dd34c4467b created by cstratak 3 months ago for Fedora 42

Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-dd34c4467b

This update has been submitted for testing by cstratak.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has been pushed to testing.

3 months ago

frantisekz provided feedback 3 months ago

karma

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

approved

3 months ago

Builds

python3.11-3.11.15-4.fc42

BZ#2444704 CVE-2026-2297 python3.11: CPython: Logging Bypass in Legacy .pyc File Handling [fedora-all]

BZ#2448188 CVE-2026-3644 python3.11: Incomplete control character validation in http.cookies [fedora-all]

BZ#2448204 CVE-2026-4224 python3.11: Stack overflow parsing XML with deeply nested DTD content models [fedora-all]

BZ#2457941 CVE-2026-1502 python3.11: Python: HTTP header injection via CR/LF in proxy tunnel headers [fedora-all]

BZ#2458013 CVE-2026-6100 python3.11: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all]

BZ#2458221 CVE-2026-4786 python3.11: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all]

python3.11-3.11.15-4.fc42

Automated Test Results

ignored