Update python version > 3.12.10 in windows installation binaries

[chromebohemian448]

Latest Windows msi package (2.75) has python 3.12.10. Which is vulnerable and has CVE-2025-4517.
Please Update python to 3.12.11 or later inside the msi package.
I've already reported it as security vulnerability here https://aka.ms/opensource/security/create-report, but my request was closed and I was provided with the links to the Windows security patching (which will not resolve this vulnerability).

Thank you.

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

This issue is related to security. Please pay attention.

Powered by issue-sentinel

[bebound]

Thanks for your report.
TarFile.extract and TarFile.extractall are not used in azure-cli, so we're not affected by this CVE.

Python 3.12.11 does not provide binary distributions. We'll fix this by bumping to 3.13, which is traced by #29640

[chromebohemian448]

Hey @bebound, thank you for quick response. Do you know if there is any plans for 3.13 release date?
Thanks

[bebound]

The deadline is the release before Ignite. I hope we can publish it a bit earlier.

[bebound]

Close as #31928 is merged