Back Linuxsecurity Fedora 42: python3.12 High CVE-2025-12084 DoS Fix FEDORA-2026
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Update Information : Security fix for CVE-2025-12084 Require at least the same expat version as used during the build time
Python 3.12 is an accessible, high-level, dynamically typed, interpreted
programming language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3.12 package provides the "python3.12" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3.12-libs package,
which should be installed automatically along with python3.12.
The remaining parts of the Python standard library are broken out into the
python3.12-tkinter and python3.12-test packages, which may need to be installed
Documentation for Python is provided in the python3.12-docs package.
Packages containing additional libraries for Python are generally named with
the "python3.12-" prefix.
Security fix for CVE-2025-12084 Require at least the same expat version as used during the build time
* Tue Jan 6 2026 Lumr Balhar - 3.12.12-2 - Security fix for CVE-2025-12084 - Require at least the same expat version as used during the build time
* Tue Jan 6 2026 Lumr Balhar - 3.12.12-2 - Security fix for CVE-2025-12084 - Require at least the same expat version as used during the build time
[ 1 ] Bug #2421612 - CVE-2025-12084 python3.12: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service [fedora-42]
[ 1 ] Bug #2421612 - CVE-2025-12084 python3.12: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service [fedora-42]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8e0e785a72' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
