Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Fedora 40: 2024-82a696ca59 high: python3.12 unbounded memory issues

fedora
Calendar Grey December 24, 2024
Scroller Fedora
Unbounded memory issues in Python 3.12 for Fedora 40 prompt urgent update. Critical fixes available now.
Update to 3.12.8

Summary

Python 3.12 is an accessible, high-level, dynamically typed, interpreted

programming language, designed with an emphasis on code readability.

It includes an extensive standard library, and has a vast ecosystem of

third-party libraries.

Update Information:

Update to 3.12.8

Topics%20covered

Topics Covered

security advisory update Fedora programming language unbounded memory python3.12 memory buffering

Change Log

* Fri Dec 6 2024 Charalampos Stratakis - 3.12.8-2 - Security fix for CVE-2024-12254 - Fixes: rhbz#2330926 * Tue Dec 3 2024 Charalampos Stratakis - 3.12.8-1 - Update to 3.12.8 - Security fix for CVE-2024-9287 - Fixes: rhbz#2321656

References


[ 1 ] Bug #2321656 - CVE-2024-9287 python3.12: Virtual environment (venv) activation scripts don't quote paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2321656 [ 2 ] Bug #2330926 - CVE-2024-12254 python3.12: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330926

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-82a696ca59' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: python3.12
Product: Fedora 40
Version: 3.12.8
Release: 2.fc40
URL: https://www.python.org/
Summary: Version 3.12 of the Python interpreter

Topics%20covered

Topics Covered

security advisory update Fedora programming language unbounded memory python3.12 memory buffering

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.