Back Linuxsecurity

Fedora python3.13 Important Security Fixes Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • June 21, 2026

[ 1 ] Bug #2457943 - CVE-2026-1502 python3.13: Python: HTTP header injection via CR/LF in proxy tunnel headers [fedora-all] [ 2 ] Bug #2458015 - CVE-2026-6100 python3.13: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules [fedora-all] [ 3 ] Bug #2458223 - CVE-2026-4786 python3.13: Python: Arbitrary code execution via command injection in webbrowser.open() API [fedora-all] [ 4 ] Bug #2484194 - CVE-2026-7210 python3.13: Python/Expat: Denial of Service via crafted XML document [fedora-all] [ 5 ] Bug #2484559 - CVE-2026-3276 python3.13: Python unicodedata: Denial of Service due to excessive CPU consumption [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dfc9182263' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for Python 3.13 in Fedora Address Multiple Vulnerabilities On June 21, 2026, Fedora released critical security updates for Python 3.13, addressing multiple vulnerabilities. The updates include fixes for CVE-2026-1502, CVE-2026-6100, CVE-2026-4786, CVE-2026-7210, and CVE-2026-3276. These vulnerabilities range from HTTP header injection and arbitrary code execution to denial of service attacks. Affected systems include all Fedora installations using Python 3.13. The updates can be applied using the 'dnf' package manager. Users are advised to upgrade immediately to mitigate potential exploitation risks. The vulnerabilities were published between April and June 2026, with the most recent being CVE-2026-3276 on June 3, 2026. This advisory emphasizes the importance of timely updates in maintaining system security. 9 sources 74

Extracted Entities

Fedora python3.13 Important Security Fixes Advisory 2026

The full story

Extracted Entities

Attack Types (2)

Companies (1)

CVEs (5)

Platforms (1)