gpp_maybe Security update for python3

SUSE-SLE-Module-Development-Tools-15-SP7-2025-2778

This update for python3 fixes the following issues: - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273). - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed issue that might allow symlink targets to point outside the destination directory, and the modification of some file metadata (bsc#1244059) - CVE-2025-4330: Fixed extraction filter bypass that allowed linking outside extraction directory (bsc#1244060) - CVE-2025-4435: Fixed Tarfile extracts filtered members when errorlevel=0 (bsc#1244061) - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter="data" (bsc#1244032) - CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249) Other fixes: - Limit buffer size for IPv6 address parsing (bsc#1244401).

Release Date

Aug 13 2025
References

Bugzilla: 1247249, 1244059, 1233012, 1244401, 831629, 1244060, 1244032, 1244056, 1244061, 1244705, 1243273
CVEs: CVE-2024-12718, CVE-2025-4517, CVE-2025-4330, CVE-2025-6069, CVE-2025-4516, CVE-2025-4435, CVE-2025-4138, CVE-2025-8194
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Development Tools Module 15.7 s390x

Packages

python3-core
Python 3 Interpreter

3.6.15-150300.10.97.1 lock src

python3-tools
Python Utility and Demonstration Scripts

3.6.15-150300.10.97.1 lock rpm

Development Tools Module 15.7 aarch64

Packages

python3-core
Python 3 Interpreter

3.6.15-150300.10.97.1 lock src

python3-tools
Python Utility and Demonstration Scripts

3.6.15-150300.10.97.1 lock rpm

Development Tools Module 15.7 ppc64le

Packages

python3-core
Python 3 Interpreter

3.6.15-150300.10.97.1 lock src

python3-tools
Python Utility and Demonstration Scripts

3.6.15-150300.10.97.1 lock rpm

Development Tools Module 15.7 x86_64

Packages

python3-core
Python 3 Interpreter

3.6.15-150300.10.97.1 lock src

python3-tools
Python Utility and Demonstration Scripts

3.6.15-150300.10.97.1 lock rpm