Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02232-1

Опубликовано: 07 июл. 2025
Источник: suse-cvrf

Описание

Security update for python39

This update for python39 fixes the following issues:

  • CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705).

Список пакетов

openSUSE Leap 15.6
libpython3_9-1_0-3.9.23-150300.4.78.1
libpython3_9-1_0-32bit-3.9.23-150300.4.78.1
python39-3.9.23-150300.4.78.1
python39-32bit-3.9.23-150300.4.78.1
python39-base-3.9.23-150300.4.78.1
python39-base-32bit-3.9.23-150300.4.78.1
python39-curses-3.9.23-150300.4.78.1
python39-dbm-3.9.23-150300.4.78.1
python39-devel-3.9.23-150300.4.78.1
python39-doc-3.9.23-150300.4.78.1
python39-doc-devhelp-3.9.23-150300.4.78.1
python39-idle-3.9.23-150300.4.78.1
python39-testsuite-3.9.23-150300.4.78.1
python39-tk-3.9.23-150300.4.78.1
python39-tools-3.9.23-150300.4.78.1

Описание

The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.


Затронутые продукты
openSUSE Leap 15.6:libpython3_9-1_0-3.9.23-150300.4.78.1
openSUSE Leap 15.6:libpython3_9-1_0-32bit-3.9.23-150300.4.78.1
openSUSE Leap 15.6:python39-3.9.23-150300.4.78.1
openSUSE Leap 15.6:python39-32bit-3.9.23-150300.4.78.1

Ссылки
Уязвимость SUSE-SU-2025:02232-1