Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 40: FEDORA-2024-be6ea1ce44 critical: python3.13 update

fedora
Calendar Grey December 19, 2024
Dist Fedora Esm H88
Stay up-to-date with urgent security patches for Python 3.13 on Fedora, focusing on memory buffering vulnerabilities and activation script issues to ensure safety
This is the first maintenance release of Python 3.13 Python 3.13 is the newest major release of the Python programming language, and it contains many new features and optimizations...

Summary

Python 3.13 is an accessible, high-level, dynamically typed, interpreted

programming language, designed with an emphasis on code readability.

It includes an extensive standard library, and has a vast ecosystem of

third-party libraries.

The python3.13 package provides the "python3.13" executable: the reference

interpreter for the Python language, version 3.

The majority of its standard library is provided in the python3.13-libs package,

which should be installed automatically along with python3.13.

The remaining parts of the Python standard library are broken out into the

python3.13-tkinter and python3.13-test packages, which may need to be installed

separately.

Documentation for Python is provided in the python3.13-docs package.

Packages containing additional libraries for Python are generally named with

the "python3.13-" prefix.

Update Information:

This is the first maintenance release of Python 3.13 Python 3.13 is the newest major release of the Python programming language, and it contains many new features and optimizations compared to Python 3.12. 3.13.1 is the latest maintenance release, containing almost 400 bugfixes, build improvements and documentation changes since 3.13.0. Security content in this release gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the mapped IPv4 address value for deciding properties. Properties which have their behavior fixed are is_multicast, is_reserved, is_link_local, is_global, and is_unspecified. CVE-2024-9287: gh-124651: Properly quote template strings in venv activation scripts. gh-125140: Remove the current directory from sys.path when using PyREPL. CVE-2024-12254: Unbounded memory buffering in SelectorSocketTransport.writelines() fixed.

Change Log

* Mon Dec 9 2024 Miro Hrončok - 3.13.1-2 - Security fix for CVE-2024-12254 - Fixes: rhbz#2330927 * Tue Dec 3 2024 Charalampos Stratakis - 3.13.1-1 - Update to 3.13.1 - Security fix for CVE-2024-9287 - Fixes: rhbz#2321657

References


[ 1 ] Bug #2321657 - CVE-2024-9287 python3.13: Virtual environment (venv) activation scripts don't quote paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2321657 [ 2 ] Bug #2330927 - CVE-2024-12254 python3.13: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330927

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-be6ea1ce44' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python3.13
Product: Fedora 40
Version: 3.13.1
Release: 2.fc40
Summary: Version 3.13 of the Python interpreter

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here