Fedora 42: FEDORA-2025-6efe030226 critical: python3.9 extraction issues
fedora
June 13, 2025
Update to 3.9.23
Summary
Python 3.9 package for developers.
This package exists to allow developers to test their code against an older
version of Python. This is not a full Python stack and if you wish to run
your applications with Python 3.9, see other distributions
that support it, such as CentOS or RHEL or older Fedora releases.
Update Information:
Update to 3.9.23. gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330] [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed tarfile extraction filters (filter="data" and filter="tar") to be bypassed using crafted symlinks and hard links. gh-133767: Fix use-after-free in the âunicode-escapeâ decoder with a non-âstrictâ error handler. gh-128840: Short-circuit the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor denial-of-service. gh-80222: Folding of quoted string in display_name violates RFC.
Topics Covered
Change Log
* Wed Jun 4 2025 Tomáš HrnÄiar
References
Fedora Update Notification FEDORA-2025-6efe030226 2025-06-13 01:02:12.682908+00:00
Name : python3.9 Product : Fedora 42 Version : 3.9.23 Release : 1.fc42 URL : https://www.python.org/ Summary : Version 3.9 of the Python interpreter Description : Python 3.9 package for developers.
This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedora releases.
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6efe030226' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: python3.9
Product: Fedora 42
Version: 3.9.23
Release: 1.fc42
Summary: Version 3.9 of the Python interpreter
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!