Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: python3.13 Critical Regression Fix Advisory 2025-62fe746ed0

fedora
Calendar Grey August 26, 2025
Dist Fedora Esm H88
Python 3.13.7 addresses urgent TLS issues and resolves an infinite loop encountered during parsing. It includes various bug fixes and enhancements.
Python 3.13.7 is the seventh maintenance release of 3.13

Summary

Python 3.13 is an accessible, high-level, dynamically typed, interpreted

programming language, designed with an emphasis on code readability.

It includes an extensive standard library, and has a vast ecosystem of

third-party libraries.

Update Information:

Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regression in ssl module between 3.13.5 and 3.13.6: reading from a TLS-encrypted connection blocks A few other bug fixes (which would otherwise have waited until the next release) are also included. 3.13.6 is the sixth maintenance release of 3.13, containing around 200 bugfixes, build improvements and documentation changes since 3.13.5. This update contains fix for https://www.cve.org/CVERecord?id=CVE-2025-8194

Topics%20covered

Topics Covered

security advisory fedora critical infinite loop tls issue python3.13

Change Log

* Thu Aug 14 2025 Miro Hron\u010dok - 3.13.7-1 - Update to 3.13.7 * Thu Aug 7 2025 Tom\u0161 Hrn\u010diar - 3.13.5-5 - Update to 3.13.6 * Mon Jul 28 2025 Miro Hron\u010dok - 3.13.5-4 - Fix CVE-2025-8194: Tarfile infinite loop during parsing with negative member offset * Fri Jul 25 2025 Fedora Release Engineering - 3.13.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Wed Jun 25 2025 Karolina Surma - 3.13.5-2 - Conditionally skip tests not working with the older expat version

References


[ 1 ] Bug #2384068 - CVE-2025-8194 python3.13: Cpython infinite loop when parsing a tarfile [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2384068

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-62fe746ed0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python3.13
Product: Fedora 41
Version: 3.13.7
Release: 1.fc41
URL: https://www.python.org/
Summary: Version 3.13 of the Python interpreter

Topics%20covered

Topics Covered

security advisory fedora critical infinite loop tls issue python3.13

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here