rpms/python3.13
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Backport patches to fix CVEs CVE-2025-15366, CVE-2025-15367

Browse source
This commit is contained in:
Tomáš Hrnčiar 2026-02-06 12:30:14 +01:00 • committed by Karolina Surma
commit b909398e15
3 changed files with 130 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
python3.13.spec
View file

@ -394,6 +394,18 @@ Patch464: 00464-enable-pac-and-bti-protections-for-aarch64.patch
# which is tested as working.
Patch466: 00466-downstream-only-skip-tests-not-working-with-older-expat-version.patch
# 00474 # 837ddca0372fa87ff9cee47142200caa21e77def
# CVE-2025-15366
#
# Reject control characters in IMAP commands
Patch474: 00474-cve-2025-15366.patch
# 00475 # d44fac01037662db286449a78c8fb819788f764c
# CVE-2025-15367
#
# Reject control characters in POP3 commands
Patch475: 00475-cve-2025-15367.patch
# 00477 # 9c62c492e7f2e3b152dbf287c08d307c3f013221
# Raise an error when importing stdlib modules compiled for a different Python version
#