p PatchFirst

SUSE-SU-2025:4368-1

SUSE-SU-2025:4368-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3 SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3 SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Module for Development Tools 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Module for Development Tools 15 SP7

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3 SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3 openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-core openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

  • python3-documentation openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.100.1

    Update to 3.6.15-150300.10.100.1

Original sources

Check your server →