-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-d68ca022b1 2026-02-10 01:31:32.937514+00:00 --------------------------------------------------------------------------------
Name : python3.6 Product : Fedora 43 Version : 3.6.15 Release : 52.fc43 URL : https://www.python.org/ Summary : Version 3.6 of the Python interpreter Description : Python 3.6 package for developers.
This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software Collections or older Fedora releases.
-------------------------------------------------------------------------------- Update Information:
Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 29 2026 Lumír Balhar lbalhar@redhat.com - 3.6.15-52 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 * Sat Jan 17 2026 Fedora Release Engineering releng@fedoraproject.org - 3.6.15-51 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Thu Nov 6 2025 Miro Hrončok mhroncok@redhat.com - 3.6.15-50 - On Fedora 44+, split this package into multiple subpackages - This mimics newer Python versions -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2431631 - CVE-2025-15366 python3.6: IMAP command injection in user-controlled commands [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2431631 [ 2 ] Bug #2431655 - CVE-2025-15367 python3.6: POP3 command injection in user-controlled commands [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2431655 [ 3 ] Bug #2431845 - CVE-2026-0865 python3.6: wsgiref.headers.Headers allows header newline injection in Python [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2431845 [ 4 ] Bug #2433831 - CVE-2026-1299 python3.6: email header injection due to unquoted newlines [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2433831 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d68ca022b1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------