SUSE-SU-2025:4368-1

Опубликовано: 11 дек. 2025

Источник: suse-cvrf

Описание

Security update for python3

This update for python3 fixes the following issues:

CVE-2025-6075: quadratic complexity in os.path.expandvars() can lead to performance degradation when values passed to it are user-controlled (bsc#1252974).
CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the zipfile module (bsc#1251305).

Список пакетов

Container bci/python:3

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

python3-devel-3.6.15-150300.10.100.1

Container bci/spack:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/389-ds:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/kea:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/kiosk/pulseaudio:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/manager/4.3/proxy-httpd:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/manager/4.3/proxy-salt-broker:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/manager/4.3/proxy-ssh:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/manager/4.3/proxy-tftpd:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/mariadb:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/samba-client:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/samba-server:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/samba-toolbox:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Container suse/sle-micro-rancher/5.2:latest

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS-Azure

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS-EC2

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS-GCE

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS-GDC

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

SUSE Linux Enterprise Micro 5.2

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

SUSE Linux Enterprise Micro 5.3

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

SUSE Linux Enterprise Micro 5.4

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

SUSE Linux Enterprise Micro 5.5

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

python3-curses-3.6.15-150300.10.100.1

python3-dbm-3.6.15-150300.10.100.1

python3-devel-3.6.15-150300.10.100.1

python3-idle-3.6.15-150300.10.100.1

python3-tk-3.6.15-150300.10.100.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libpython3_6m1_0-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

python3-curses-3.6.15-150300.10.100.1

python3-dbm-3.6.15-150300.10.100.1

python3-devel-3.6.15-150300.10.100.1

python3-idle-3.6.15-150300.10.100.1

python3-tk-3.6.15-150300.10.100.1

SUSE Linux Enterprise Module for Development Tools 15 SP6

python3-tools-3.6.15-150300.10.100.1

SUSE Linux Enterprise Module for Development Tools 15 SP7

python3-tools-3.6.15-150300.10.100.1

openSUSE Leap 15.6

libpython3_6m1_0-3.6.15-150300.10.100.1

libpython3_6m1_0-32bit-3.6.15-150300.10.100.1

python3-3.6.15-150300.10.100.1

python3-base-3.6.15-150300.10.100.1

python3-curses-3.6.15-150300.10.100.1

python3-dbm-3.6.15-150300.10.100.1

python3-devel-3.6.15-150300.10.100.1

python3-doc-3.6.15-150300.10.100.1

python3-doc-devhelp-3.6.15-150300.10.100.1

python3-idle-3.6.15-150300.10.100.1

python3-testsuite-3.6.15-150300.10.100.1

python3-tk-3.6.15-150300.10.100.1

python3-tools-3.6.15-150300.10.100.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254368-1/
Link for SUSE-SU-2025:4368-1
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023523.html
E-Mail link for SUSE-SU-2025:4368-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1251305
SUSE Bug 1251305
https://bugzilla.suse.com/1252974
SUSE Bug 1252974
https://www.suse.com/security/cve/CVE-2025-6075/
SUSE CVE CVE-2025-6075 page
https://www.suse.com/security/cve/CVE-2025-8291/
SUSE CVE CVE-2025-8291 page

Описание

If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.

Затронутые продукты

Container bci/python:3:libpython3_6m1_0-3.6.15-150300.10.100.1

Container bci/python:3:python3-3.6.15-150300.10.100.1

Container bci/python:3:python3-base-3.6.15-150300.10.100.1

Container bci/python:3:python3-devel-3.6.15-150300.10.100.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-6075.html
CVE-2025-6075
https://bugzilla.suse.com/1252974
SUSE Bug 1252974

Описание

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations. Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.

Затронутые продукты

Container bci/python:3:libpython3_6m1_0-3.6.15-150300.10.100.1

Container bci/python:3:python3-3.6.15-150300.10.100.1

Container bci/python:3:python3-base-3.6.15-150300.10.100.1

Container bci/python:3:python3-devel-3.6.15-150300.10.100.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-8291.html
CVE-2025-8291
https://bugzilla.suse.com/1251305
SUSE Bug 1251305

SUSE-SU-2025:4368-1

Описание

Список пакетов

Container bci/python:3

Container bci/spack:latest

Container suse/389-ds:latest

Container suse/kea:latest

Container suse/kiosk/pulseaudio:latest

Container suse/manager/4.3/proxy-httpd:latest

Container suse/manager/4.3/proxy-salt-broker:latest

Container suse/manager/4.3/proxy-ssh:latest

Container suse/manager/4.3/proxy-tftpd:latest

Container suse/mariadb:latest

Container suse/samba-client:latest

Container suse/samba-server:latest

Container suse/samba-toolbox:latest

Container suse/sle-micro-rancher/5.2:latest

Image SLES15-SP6-CHOST-BYOS

Image SLES15-SP6-CHOST-BYOS-Aliyun

Image SLES15-SP6-CHOST-BYOS-Azure

Image SLES15-SP6-CHOST-BYOS-EC2

Image SLES15-SP6-CHOST-BYOS-GCE

Image SLES15-SP6-CHOST-BYOS-GDC

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Development Tools 15 SP6

SUSE Linux Enterprise Module for Development Tools 15 SP7

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2025-6075

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-8291

Описание

Затронутые продукты

Ссылки