#21584 closed enhancement (fixed)
CPython CVE-2025-4516
| Reported by: | Joe Locash | Owned by: | Douglas R. Reno |
|---|---|---|---|
| Priority: | elevated | Milestone: | 12.4 |
| Component: | BOOK | Version: | git |
| Severity: | medium | Keywords: | |
| Cc: |
Description
Rated as medium.
PR that fixes it (merged): https://github.com/python/cpython/pull/129648
PR backported for the 3.13 branch: https://github.com/python/cpython/pull/133944
Change History (11)
comment:1 by , 17 months ago
| Priority: | normal → elevated |
|---|
comment:2 by , 17 months ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:3 by , 17 months ago
comment:4 by , 17 months ago
Per https://github.com/python/cpython/pull/133944#issuecomment-2876561013 we perhaps cannot just backport the fix. Please wait until the upstream makes the final decision.
comment:5 by , 17 months ago
| Milestone: | 12.4 → 99-Waiting |
|---|---|
| Priority: | elevated → normal |
| Summary: | CPython CVE-2025-4516 → CPython CVE-2025-4516 (wait on upstream) |
I'll check this a couple of times a day, as we need to wait for upstream to determine what the correct solution is
comment:7 by , 17 months ago
| Milestone: | 99-Waiting → 12.4 |
|---|
Replying to Joe Locash:
The PR has been merged upstream.
Sounds good, bringing it back to 12.4. I'll make sure that gets into the security advisories.
comment:8 by , 17 months ago
| Priority: | normal → elevated |
|---|
comment:9 by , 17 months ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
comment:10 by , 17 months ago
| Summary: | CPython CVE-2025-4516 (wait on upstream) → CPython CVE-2025-4516 |
|---|
Note:
See TracTickets
for help on using tickets.
Thank you for bringing it up here Joe, I'll make sure this makes it in with the others