insecure by designRSS

Topic

#fedora

1 article

medium1 sourceCVE-2026-15310 CVE-2026-15806 +6

Fedora 44 Pushes Python 3.12 Maintenance Update Addressing Eight CVEs

The Fedora Project has issued an official security update advisory, designated FEDORA-2026-b3da0d09be, for the `python3.12` package suite running on Fedora 44. This update transitions the distribution's core interpreter environment up to version `3.12.15-1.fc44`. According to the changelog entries authored by Red Hat maintainer Tomáš Hrnčiar, the re-packaged interpreter rolls up upstream patches for eight separate security identifiers: `CVE-2026-15310`, `CVE-2026-15806`, `CVE-2026-17084`, `CVE-2026-19445`, `CVE-2026-19553`, `CVE-2026-19672`, `CVE-2026-82049`, and `CVE-2026-87910`. The package provides the core `python3.12` binary executable alongside its associated runtime dependencies and the standard library distribution split into `python3.12-libs`. Additional modular components belonging to the broader language runtime, such as the `python3.12-tkinter` GUI framework and the `python3.12-test` test suite suites, are also managed under this release ecosystem. Fedora system operators can pull the patched binaries directly from the official repositories using the system package manager with the command `dnf upgrade --advisory FEDORA-2026-b3da0d09be`. All updated RPM artifacts distributed in this advisory are signed by the standard Fedora Project GPG key infrastructure for verification. Documentation components packaged under `python3.12-docs` and related Python extension libraries prefixed with `python3.12-` are covered within the same repository release stream. The advisory notes that users should rely on standard `dnf` tooling to maintain proper dependency resolution for interpreter libraries and associated add-ons.

Read more about Fedora 44 Pushes Python 3.12 Maintenance Update Addressing Eight CVEs

← all articles