Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities on `os.path.expandvars()` (bsc#1252974). - CVE-2025-8291: Fixed missing validity checks of the ZIP64 End of Central Directory (EOCD) (bsc#1251305). Other issues fixed: - Added @requires_lchmod operator for skipping tests on platforms were changing the mode of symbolic links is supported. - Fixed decoding byte strings in `localeconv()` for consistent output.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python3 fixes the following issues: Security issues fixed: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities on `os.path.expandvars()` (bsc#1252974). - CVE-2025-8291: Fixed missing validity checks of the ZIP64 End of Central Directory (EOCD) (bsc#1251305). Other issues fixed: - Added @requires_lchmod operator for skipping tests on platforms were changing the mode of symbolic links is supported. - Fixed decoding byte strings in `localeconv()` for consistent output.
05 / REFERENCES