SUSE-SU-2025:4398-1

SUSE-SU-2025:4398-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: Security issues fixed: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities on `os.path.expandvars()` (bsc#1252974). - CVE-2025-8291: Fixed missing validity checks of the ZIP64 End of Central Directory (EOCD) (bsc#1251305). Other issues fixed: - Added @requires_lchmod operator for skipping tests on platforms were changing the mode of symbolic links is supported. - Fixed decoding byte strings in `localeconv()` for consistent output.

Fix available

Published

2025-12-15T11:30:55Z

Updated

2026-03-23T04:51:31.357282Z

Stack: system

Check your server →