rpms/python3.14
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix CVE-2025-15366, CVE-2025-15367

Browse source
This commit is contained in:
Karolina Surma 2026-02-09 10:10:54 +01:00
commit aaf6ec2cca
3 changed files with 131 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
python3.14.spec
View file

@ -416,6 +416,18 @@ Patch464: 00464-enable-pac-and-bti-protections-for-aarch64.patch
# which is tested as working.
Patch466: 00466-downstream-only-skip-tests-not-working-with-older-expat-version.patch
# 00474 # 0d9da266d5ecb31d8a417a0a5daa251a2d99389f
# CVE-2025-15366
#
# Downstream only: Reject control characters in IMAP commands
Patch474: 00474-cve-2025-15366.patch
# 00475 # 91e12ebfb2a88b265f3764a0d852b6fa53b2386a
# CVE-2025-15367
#
# Downstream only: Reject control characters in POP3 commands
Patch475: 00475-cve-2025-15367.patch
# 00477 # f9f53e560d161531a0c3476c08ee26b89a628bde
# Raise an error when importing stdlib modules compiled for a different Python version
#
@ -1987,6 +1999,7 @@ CheckPython freethreading
%changelog
* Wed Feb 04 2026 Karolina Surma <ksurma@redhat.com> - 3.14.3-1
- Update to Python 3.14.3
- Fix CVE-2025-15366, CVE-2025-15367
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 3.14.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild