[LFS Trac] #5727: Bring over the Python security fixes patch from BLFS.

"LFS Trac" ([email protected] via lfs-book Mailing List) <[email protected]> Wed, 21 May 2025 00:39:42 -0000

Newsgroups	gmane.linux.lfs.book
Message-ID	<[email protected]>

#5727: Bring over the Python security fixes patch from BLFS.
-----------------------------+----------------------
 Reporter:  Douglas R. Reno  |      Owner:  lfs-book
     Type:  enhancement      |     Status:  new
 Priority:  high             |  Milestone:  12.4
Component:  Book             |    Version:  git
 Severity:  normal           |   Keywords:
-----------------------------+----------------------
 This will fix the following vulnerability:

 "[CVE-2025-4516] Use-after-free crash using bytes.decode("unicode_escape",
 error="ignore|replace")"

 Details can be found at https://mail.python.org/archives/list/security-
 [email protected]/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/

 SA-12.3-018 has been prefiled for this issue as it's fixed in BLFS as of
 earlier today. This should be safe to put in with the June 1st update.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5727>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page