Files
buildroot/package/python3/python3.mk
Titouan Christophe 4afa94f4fb package/python3: security bump to v3.12.13
See the release notes: https://www.python.org/downloads/release/python-31213/

This fixes a handful of bugs and the following vulnerability:
- CVE-2024-6923:
    There is a MEDIUM severity vulnerability affecting CPython.  The
    email module didn’t properly quote newlines for email headers when
    serializing an email message allowing for header injection when an
    email  is serialized.
    https://www.cve.org/CVERecord?id=CVE-2024-6923

This also includes a mitigation for a libexpat vulnerability:
- CVE-2025-59375:
    libexpat in Expat before 2.7.2 allows attackers to trigger large
    dynamic memory allocations via a small document that is submitted for
    parsing.
    https://www.cve.org/CVERecord?id=CVE-2025-59375

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit f862711b10)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-04-24 18:20:26 +02:00

8.4 KiB