Security update for python3
This update for python3 fixes the following issues: Security fixes: - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-4330: Fixed extraction filter bypass for linking outside extraction directory (bsc#1244060) - CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750) - CVE-2024-12718: Fixed bypass extraction filter to modify file metadata outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed symlinking targets to not point outside the destination directory, and the modification of some file metadata (bsc#1244059) - CVE-2025-4435: Fixed tarfile extracting filtered members when errorlevel=0 (bsc#1244061) Other fixes: - Fixed two shebangs with /usr/local/bin/python
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python3 fixes the following issues: Security fixes: - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-4330: Fixed extraction filter bypass for linking outside extraction directory (bsc#1244060) - CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750) - CVE-2024-12718: Fixed bypass extraction filter to modify file metadata outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed symlinking targets to not point outside the destination directory, and the modification of some file metadata (bsc#1244059) - CVE-2025-4435: Fixed tarfile extracting filtered members when errorlevel=0 (bsc#1244061) Other fixes: - Fixed two shebangs with /usr/local/bin/python
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1203750
- https://bugzilla.suse.com/1244032
- https://bugzilla.suse.com/1244056
- https://bugzilla.suse.com/1244059
- https://bugzilla.suse.com/1244060
- https://bugzilla.suse.com/1244061
- https://bugzilla.suse.com/1251841
- https://www.suse.com/security/cve/CVE-2007-4559
- https://www.suse.com/security/cve/CVE-2024-12718
- https://www.suse.com/security/cve/CVE-2025-4138
- https://www.suse.com/security/cve/CVE-2025-4330
- https://www.suse.com/security/cve/CVE-2025-4435
- https://www.suse.com/security/cve/CVE-2025-4517
- https://www.suse.com/support/update/announcement/2026/suse-su-20260210-1/