Important Security Update for Python 3.14 in Fedora 40 Regarding CVE-2024-12254
Summary
Python 3.14 is an accessible, high-level, dynamically typed, interpreted
programming language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3.14 package provides the "python3.14" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3.14-libs package,
which should be installed automatically along with python3.14.
The remaining parts of the Python standard library are broken out into the
python3.14-tkinter and python3.14-test packages, which may need to be installed
separately.
Documentation for Python is provided in the python3.14-docs package.
Packages containing additional libraries for Python are generally named with
the "python3.14-" prefix.
Update Information:
Security fix for CVE-2024-12254
Change Log
* Sun Dec 8 2024 Charalampos Stratakis
References
[ 1 ] Bug #2330928 - CVE-2024-12254 python3.14: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2330928
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-b2cebcbb49' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label