← Search the atlas
SUSE-SU-2025:4368-1
Not scored
Security update for python3
This update for python3 fixes the following issues:
- CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed
to it are user-controlled (bsc#1252974).
- CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of
ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305).
Exploit probability
Not scored
Published
December 11, 2025
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Micro 5.2
python3
SUSE:Linux Enterprise Micro 5.2
python3-core
SUSE:Linux Enterprise Micro 5.3
python3
SUSE:Linux Enterprise Micro 5.3
python3-core
SUSE:Linux Enterprise Micro 5.4
python3
SUSE:Linux Enterprise Micro 5.4
python3-core
SUSE:Linux Enterprise Micro 5.5
python3
SUSE:Linux Enterprise Micro 5.5
python3-core
SUSE:Linux Enterprise Module for Basesystem 15 SP6
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP6
python3-core
SUSE:Linux Enterprise Module for Basesystem 15 SP7
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP7
python3-core
SUSE:Linux Enterprise Module for Development Tools 15 SP6
python3-core
SUSE:Linux Enterprise Module for Development Tools 15 SP7
python3-core
openSUSE:Leap 15.6
python3
openSUSE:Leap 15.6
python3-core
openSUSE:Leap 15.6
python3-documentation
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2025:4368-1
This update for python3 fixes the following issues:
- CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed
to it are user-controlled (bsc#1252974).
- CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of
ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305).
View original source ↗
05 / REFERENCES
Further evidence