Back Linuxsecurity Fedora 43 python3.12 Security Upgrade for DoS CVE-2025
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Update Information : Security fix for CVE-2025-13836
Python 3.12 is an accessible, high-level, dynamically typed, interpreted
programming language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3.12 package provides the "python3.12" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3.12-libs package,
which should be installed automatically along with python3.12.
The remaining parts of the Python standard library are broken out into the
python3.12-tkinter and python3.12-test packages, which may need to be installed
Documentation for Python is provided in the python3.12-docs package.
Packages containing additional libraries for Python are generally named with
the "python3.12-" prefix.
Security fix for CVE-2025-13836
* Fri Jan 16 2026 Lumr Balhar - 3.12.12-3 - Security fix for CVE-2025-13836
* Fri Jan 16 2026 Lumr Balhar - 3.12.12-3 - Security fix for CVE-2025-13836
[ 1 ] Bug #2428943 - CVE-2025-13836 python3.12: Excessive read buffering DoS in http.client [fedora-43]
[ 1 ] Bug #2428943 - CVE-2025-13836 python3.12: Excessive read buffering DoS in http.client [fedora-43]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-06aa85da91' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
