SUSE-SU-2025:02049-1: python311-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise

Published
Published 20-06-2025Last modified 21-06-2025

Vulnerability summary

SUSE-SU-2025:02049-1 is a vulnerability in python311-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise with no CVSS score yet.

Priority
Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
Not scored
010
No CVSS score recorded
EPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2024-12718CVE-2025-4138CVE-2025-4330CVE-2025-4516CVE-2025-4517

Timeline

  1. 20-06-2025
    PublishedVulnerability first disclosed.
  2. 21-06-2025
    Last modifiedVulnerability information updated.

Description

Security update for python311 This update for python311 fixes the following issues: python311 was updated from version 3.11.10 to 3.11.13: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273). * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed tarfile extraction filters to be bypassed using crafted symlinks and hard links (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032) - Other bugs fixed: * Improved handling of system call failures that OpenSSL reports (bsc#1241067) * Disable GC during thread operations to prevent deadlocks. * Fixed a potential denial of service vulnerability in the imaplib module. * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when flattening an email message using a modern email policy. * Fixed parsing long IPv6 addresses with embedded IPv4 address. * Fixed ipaddress.IPv6Address.reverse_pointer output according to RFC 3596. * Improved the textual representation of IPv4-mapped IPv6 addresses in ipaddress. * ipaddress: fixed hash collisions for IPv4Network and IPv6Network objects * os.path.realpath() now accepts a strict keyword-only argument. * Stop the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor denial-of-service. * Updated bundled libexpat to 2.7.1 * Writers of CPython documentation can now use next as the version for the versionchanged, versionadded, deprecated directives.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: not stated in public data.

Suse26 products
  • python311-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 3.11.13-150400.9.60.1
  • python311-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 3.11.13-150400.9.60.1
  • python311-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 3.11.13-150400.9.60.1
  • python311-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 3.11.13-150400.9.60.1
  • python311-core&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4< 3.11.13-150400.9.60.1

1 vendor · 26 products

References

12 links
Show all 12 references