SUSE-SU-2026:0133-1: python-base&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:0133-1 is a vulnerability in python-base&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 16-01-2026PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for python This update for python fixes the following issues: - CVE-2025-8291: check validity of the ZIP64 End of Central Directory (EOCD) in the 'zipfile' module (bsc#1251305). - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length (bsc#1254400).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- python-base&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.56.1
- python-doc&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.56.1
- python&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.56.1
1 vendor · 3 products