From 4afa94f4fb9662a8655eca8d035b510352de1694 Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Fri, 17 Apr 2026 11:18:00 +0200 Subject: [PATCH] package/python3: security bump to v3.12.13 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit See the release notes: https://www.python.org/downloads/release/python-31213/ This fixes a handful of bugs and the following vulnerability: - CVE-2024-6923: There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. https://www.cve.org/CVERecord?id=CVE-2024-6923 This also includes a mitigation for a libexpat vulnerability: - CVE-2025-59375: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. https://www.cve.org/CVERecord?id=CVE-2025-59375 Signed-off-by: Titouan Christophe (cherry picked from commit f862711b1033ee3b0bd92f2aab9f16ee4035b603) Signed-off-by: Thomas Perale --- package/python3/python3.hash | 6 +++--- package/python3/python3.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python3/python3.hash b/package/python3/python3.hash index ed0d879f11..5b10f24f70 100644 --- a/package/python3/python3.hash +++ b/package/python3/python3.hash @@ -1,5 +1,5 @@ -# From https://www.python.org/downloads/release/python-31211/ -md5 04feb01316c7bb1b448001adbc63dd23 Python-3.12.12.tar.xz +# From https://www.python.org/downloads/release/python-31213/ +md5 b67dc5d55b27c98a36615f7d0dfa6e4c Python-3.12.13.tar.xz # Locally computed -sha256 fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4 Python-3.12.12.tar.xz +sha256 c08bc65a81971c1dd5783182826503369466c7e67374d1646519adf05207b684 Python-3.12.13.tar.xz sha256 3b2f81fe21d181c499c59a256c8e1968455d6689d269aa85373bfb6af41da3bf LICENSE diff --git a/package/python3/python3.mk b/package/python3/python3.mk index 4ace4d8573..60ab5b0cbc 100644 --- a/package/python3/python3.mk +++ b/package/python3/python3.mk @@ -5,7 +5,7 @@ ################################################################################ PYTHON3_VERSION_MAJOR = 3.12 -PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).12 +PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).13 PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION) PYTHON3_LICENSE = Python-2.0, others