SUSE-SU-2025:02047-1: python310-core&distro=openSUSE Leap 15.6

Published
Published 20-06-2025Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2025:02047-1 is a vulnerability in python310-core&distro=openSUSE Leap 15.6 with no CVSS score yet.

Priority
Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
Not scored
010
No CVSS score recorded
EPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2024-12718CVE-2025-4138CVE-2025-4330CVE-2025-4516CVE-2025-4517

Timeline

  1. 20-06-2025
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for python310 This update for python310 fixes the following issues: python310 was updated from version 3.10.16 to 3.10.18: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273) * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed tarfile extraction filters to be bypassed using crafted symlinks and hard links (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032) - Other changes and bugs fixed: * Improved handling of system call failures that OpenSSL reports (bsc#1241067) * Fixed issue with test_ssl pass with OpenSSL 3.5 (bsc#1241067) * Fixed issue with reproducible builds (bsc#1239210) * Fixed a potential denial of service vulnerability in the imaplib module. * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when flattening an email message using a modern email policy. * Fixed parsing long IPv6 addresses with embedded IPv4 address. * Fixed ipaddress.IPv6Address.reverse_pointer output according to RFC 3596 * Improved handling of system call failures that OpenSSL reports * Improved the textual representation of IPv4-mapped IPv6 addresses in ipaddress. * ipaddress: fixed hash collisions for IPv4Network and IPv6Network objects * os.path.realpath() now accepts a strict keyword-only argument. * Stop the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor denial-of-service. * Updated bundled libexpat to 2.7.1 * Writers of documentation can now use next as the version for the versionchanged, versionadded, deprecated directives.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: not stated in public data.

Suse8 products
  • python310-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 3.10.18-150400.4.82.1
  • python310-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 3.10.18-150400.4.82.1
  • python310-core&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 3.10.18-150400.4.82.1
  • python310-core&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 3.10.18-150400.4.82.1
  • python310&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 3.10.18-150400.4.82.1
Opensuse3 products
  • python310-core&distro=openSUSE Leap 15.6< 3.10.18-150400.4.82.1
  • python310-documentation&distro=openSUSE Leap 15.6< 3.10.18-150400.4.82.1
  • python310&distro=openSUSE Leap 15.6< 3.10.18-150400.4.82.1

2 vendors · 11 products

References

13 links
Show all 13 references