suse-su-2025:02074-1
Vulnerability from csaf_suse
Published
2025-06-24 07:26
Modified
2025-06-24 07:26
Summary
Security update for python313
Notes
Title of the patch
Security update for python313
Description of the patch
This update for python313 fixes the following issues:
Update to version 3.13.5.
Security issues fixed:
- CVE-2025-4517: arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032)
- CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273).
- CVE-2025-4330: extraction filter bypass for linking outside extraction directory (bsc#1244060)
- CVE-2025-4138: may allow symlink targets to point outside the destination directory, and the modification of some file metadata.
(bsc#1244059)
- CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse (bsc#1236705).
- CVE-2024-12718: bypass extraction filter to modify file metadata outside extraction directory (bsc#1244056)
- CVE-2024-12254: memory exhaustion due to unbounded memory buffering in `SelectorSocketTransport.writelines()`
(bsc#1234290).
Other changes and issues fixed:
Changes from 3.13.5:
- Tests
- gh-135120: Add test.support.subTests().
- Library
- gh-133967: Do not normalize locale name ‘C.UTF-8’ to
‘en_US.UTF-8’.
- gh-135326: Restore support of integer-like objects with
__index__() in random.getrandbits().
- gh-135321: Raise a correct exception for values greater
than 0x7fffffff for the BINSTRING opcode in the C
implementation of pickle.
- gh-135276: Backported bugfixes in zipfile.Path from
zipp 3.23. Fixed .name, .stem and other basename-based
properties on Windows when working with a zipfile on disk.
- gh-134151: email: Fix TypeError in
email.utils.decode_params() when sorting RFC 2231
continuations that contain an unnumbered section.
- gh-134152: email: Fix parsing of email message ID with
invalid domain.
- gh-127081: Fix libc thread safety issues with os by
replacing getlogin with getlogin_r re-entrant version.
- gh-131884: Fix formatting issues in json.dump() when both
indent and skipkeys are used.
- Core and Builtins
- gh-135171: Roll back changes to generator and list
comprehensions that went into 3.13.4 to fix gh-127682,
but which involved semantic and bytecode changes not
appropriate for a bugfix release.
- C API
- gh-134989: Fix Py_RETURN_NONE, Py_RETURN_TRUE and
Py_RETURN_FALSE macros in the limited C API 3.11 and
older: don’t treat Py_None, Py_True and Py_False as
immortal. Patch by Victor Stinner.
- gh-134989: Implement PyObject_DelAttr() and
PyObject_DelAttrString() as macros in the limited C API
3.12 and older. Patch by Victor Stinner.
Changes from 3.13.4:
- Security
- gh-135034: Fixes multiple issues that allowed tarfile
extraction filters (filter='data' and filter='tar') to be
bypassed using crafted symlinks and hard links.
Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
(bsc#1244059), CVE-2025-4330 (bsc#1244060), and
CVE-2025-4517 (bsc#1244032).
- gh-133767: Fix use-after-free in the “unicode-escape”
decoder with a non-“strict” error handler (CVE-2025-4516,
bsc#1243273).
- gh-128840: Short-circuit the processing of long IPv6
addresses early in ipaddress to prevent excessive memory
consumption and a minor denial-of-service.
- Library
- gh-134718: ast.dump() now only omits None and [] values if
they are default values.
- gh-128840: Fix parsing long IPv6 addresses with embedded
IPv4 address.
- gh-134696: Built-in HACL* and OpenSSL implementations of
hash function constructors now correctly accept the same
documented named arguments. For instance, md5() could be
previously invoked as md5(data=data) or md5(string=string)
depending on the underlying implementation but these calls
were not compatible. Patch by Bénédikt Tran.
- gh-134210: curses.window.getch() now correctly handles
signals. Patch by Bénédikt Tran.
- gh-80334: multiprocessing.freeze_support() now checks for
work on any “spawn” start method platform rather than only
on Windows.
- gh-114177: Fix asyncio to not close subprocess pipes which
would otherwise error out when the event loop is already
closed.
- gh-134152: Fixed UnboundLocalError that could occur during
email header parsing if an expected trailing delimiter is
missing in some contexts.
- gh-62184: Remove import of C implementation of io.FileIO
from Python implementation which has its own implementation
- gh-133982: Emit RuntimeWarning in the Python implementation
of io when the file-like object is not closed explicitly in
the presence of multiple I/O layers.
- gh-133890: The tarfile module now handles
UnicodeEncodeError in the same way as OSError when cannot
extract a member.
- gh-134097: Fix interaction of the new REPL and -X
showrefcount command line option.
- gh-133889: The generated directory listing page in
http.server.SimpleHTTPRequestHandler now only shows the
decoded path component of the requested URL, and not the
query and fragment.
- gh-134098: Fix handling paths that end with
a percent-encoded slash (%2f or %2F) in
http.server.SimpleHTTPRequestHandler.
- gh-134062: ipaddress: fix collisions in __hash__() for
IPv4Network and IPv6Network objects.
- gh-133745: In 3.13.3 we accidentally changed the signature
of the asyncio create_task() family of methods and how it
calls a custom task factory in a backwards incompatible
way. Since some 3rd party libraries have already made
changes to work around the issue that might break if
we simply reverted the changes, we’re instead changing
things to be backwards compatible with 3.13.2 while still
supporting those workarounds for 3.13.3. In particular, the
special-casing of name and context is back (until 3.14) and
consequently eager tasks may still find that their name
hasn’t been set before they execute their first yielding
await.
- gh-71253: Raise ValueError in open() if opener returns a
negative file-descriptor in the Python implementation of io
to match the C implementation.
- gh-77057: Fix handling of invalid markup declarations in
html.parser.HTMLParser.
- gh-133489: random.getrandbits() can now generate more that
231 bits. random.randbytes() can now generate more that 256
MiB.
- gh-133290: Fix attribute caching issue when setting
ctypes._Pointer._type_ in the undocumented and deprecated
ctypes.SetPointerType() function and the undocumented
set_type() method.
- gh-132876: ldexp() on Windows doesn’t round subnormal
results before Windows 11, but should. Python’s
math.ldexp() wrapper now does round them, so results may
change slightly, in rare cases of very small results, on
Windows versions before 11.
- gh-133089: Use original timeout value for
subprocess.TimeoutExpired when the func subprocess.run()
is called with a timeout instead of sometimes a confusing
partial remaining time out value used internally on the
final wait().
- gh-133009: xml.etree.ElementTree: Fix a crash in
Element.__deepcopy__ when the element is concurrently
mutated. Patch by Bénédikt Tran.
- gh-132995: Bump the version of pip bundled in ensurepip to
version 25.1.1
- gh-132017: Fix error when pyrepl is suspended, then resumed
and terminated.
- gh-132673: Fix a crash when using _align_ = 0 and _fields_
= [] in a ctypes.Structure.
- gh-132527: Include the valid typecode ‘w’ in the error
message when an invalid typecode is passed to array.array.
- gh-132439: Fix PyREPL on Windows: characters entered via
AltGr are swallowed. Patch by Chris Eibl.
- gh-132429: Fix support of Bluetooth sockets on NetBSD and
DragonFly BSD.
- gh-132106: QueueListener.start now raises a RuntimeError if
the listener is already started.
- gh-132417: Fix a NULL pointer dereference when a C function
called using ctypes with restype py_object returns NULL.
- gh-132385: Fix instance error suggestions trigger potential
exceptions in object.__getattr__() in traceback.
- gh-132308: A traceback.TracebackException now correctly
renders the __context__ and __cause__ attributes from
falsey Exception, and the exceptions attribute from falsey
ExceptionGroup.
- gh-132250: Fixed the SystemError in cProfile when locating
the actual C function of a method raises an exception.
- gh-132063: Prevent exceptions that evaluate as
falsey (namely, when their __bool__ method returns
False or their __len__ method returns 0) from being
ignored by concurrent.futures.ProcessPoolExecutor and
concurrent.futures.ThreadPoolExecutor.
- gh-119605: Respect follow_wrapped for __init__() and
__new__() methods when getting the class signature for a
class with inspect.signature(). Preserve class signature
after wrapping with warnings.deprecated(). Patch by Xuehai
Pan.
- gh-91555: Ignore log messages generated during handling of
log messages, to avoid deadlock or infinite recursion.
- gh-131434: Improve error reporting for incorrect format in
time.strptime().
- gh-131127: Systems using LibreSSL now successfully build.
- gh-130999: Avoid exiting the new REPL and offer suggestions
even if there are non-string candidates when errors occur.
- gh-130941: Fix configparser.ConfigParser parsing empty
interpolation with allow_no_value set to True.
- gh-129098: Fix REPL traceback reporting when using
compile() with an inexisting file. Patch by Bénédikt Tran.
- gh-130631: http.cookiejar.join_header_words() is now more
similar to the original Perl version. It now quotes the
same set of characters and always quote values that end
with '\n'.
- gh-129719: Fix missing socket.CAN_RAW_ERR_FILTER constant
in the socket module on Linux systems. It was missing since
Python 3.11.
- gh-124096: Turn on virtual terminal mode and enable
bracketed paste in REPL on Windows console. (If the
terminal does not support bracketed paste, enabling it does
nothing.)
- gh-122559: Remove __reduce__() and __reduce_ex__() methods
that always raise TypeError in the C implementation
of io.FileIO, io.BufferedReader, io.BufferedWriter
and io.BufferedRandom and replace them with default
__getstate__() methods that raise TypeError. This restores
fine details of behavior of Python 3.11 and older versions.
- gh-122179: hashlib.file_digest() now raises BlockingIOError
when no data is available during non-blocking I/O. Before,
it added spurious null bytes to the digest.
- gh-86155: html.parser.HTMLParser.close() no longer loses
data when the <script> tag is not closed. Patch by Waylan
Limberg.
- gh-69426: Fix html.parser.HTMLParser to not unescape
character entities in attribute values if they are followed
by an ASCII alphanumeric or an equals sign.
- bpo-44172: Keep a reference to original curses windows in
subwindows so that the original window does not get deleted
before subwindows.
- Tests
- gh-133744: Fix multiprocessing interrupt test. Add an event
to synchronize the parent process with the child process:
wait until the child process starts sleeping. Patch by
Victor Stinner.
- gh-133639: Fix
TestPyReplAutoindent.test_auto_indent_default() doesn’t run
input_code.
- gh-133131: The iOS testbed will now select the most
recently released “SE-class” device for testing if a device
isn’t explicitly specified.
- gh-109981: The test helper that counts the list of open
file descriptors now uses the optimised /dev/fd approach on
all Apple platforms, not just macOS. This avoids crashes
caused by guarded file descriptors.
- IDLE
- gh-112936: fix IDLE: no Shell menu item in single-process
mode.
- Documentation
- gh-107006: Move documentation and example code for
threading.local from its docstring to the official docs.
- Core and Builtins
- gh-134908: Fix crash when iterating over lines in a text
file on the free threaded build.
- gh-127682: No longer call __iter__ twice in list
comprehensions. This brings the behavior of list
comprehensions in line with other forms of iteration
- gh-134381: Fix RuntimeError when using a not-started
threading.Thread after calling os.fork()
- gh-128066: Fixes an edge case where PyREPL improperly threw
an error when Python is invoked on a read only filesystem
while trying to write history file entries.
- gh-134100: Fix a use-after-free bug that occurs when an
imported module isn’t in sys.modules after its initial
import. Patch by Nico-Posada.
- gh-133703: Fix hashtable in dict can be bigger than
intended in some situations.
- gh-132869: Fix crash in the free threading build when
accessing an object attribute that may be concurrently
inserted or deleted.
- gh-132762: fromkeys() no longer loops forever when adding
a small set of keys to a large base dict. Patch by Angela
Liss.
- gh-133543: Fix a possible memory leak that could occur when
directly accessing instance dictionaries (__dict__) that
later become part of a reference cycle.
- gh-133516: Raise ValueError when constants True, False or
None are used as an identifier after NFKC normalization.
- gh-133441: Fix crash upon setting an attribute with a dict
subclass. Patch by Victor Stinner.
- gh-132942: Fix two races in the type lookup cache. This
affected the free-threaded build and could cause crashes
(apparently quite difficult to trigger).
- gh-132713: Fix repr(list) race condition: hold a strong
reference to the item while calling repr(item). Patch by
Victor Stinner.
- gh-132747: Fix a crash when calling __get__() of a method
with a None second argument.
- gh-132542: Update Thread.native_id after fork(2) to ensure
accuracy. Patch by Noam Cohen.
- gh-124476: Fix decoding from the locale encoding in the
C.UTF-8 locale.
- gh-131927: Compiler warnings originating from the same
module and line number are now only emitted once, matching
the behaviour of warnings emitted from user code. This can
also be configured with warnings filters.
- gh-127682: No longer call __iter__ twice when creating and
executing a generator expression. Creating a generator
expression from a non-interable will raise only when the
generator expression is executed. This brings the behavior
of generator expressions in line with other generators.
- gh-131878: Handle uncaught exceptions in the main input
loop for the new REPL.
- gh-131878: Fix support of unicode characters with two or
more codepoints on Windows in the new REPL.
- gh-130804: Fix support of unicode characters on Windows in
the new REPL.
- gh-130070: Fixed an assertion error for exec() passed a
string source and a non-None closure. Patch by Bartosz
Sławecki.
- gh-129958: Fix a bug that was allowing newlines
inconsitently in format specifiers for single-quoted
f-strings. Patch by Pablo Galindo.
- C API
- gh-132909: Fix an overflow when handling the K format in
Py_BuildValue(). Patch by Bénédikt Tran.
- Changes from version 3.13.3
- Tools/Demos
- gh-131852: msgfmt no longer adds the POT-Creation-Date to
generated .mo files for consistency with GNU msgfmt.
- gh-85012: Correctly reset msgctxt when compiling messages
in msgfmt.
- gh-130025: The iOS testbed now correctly handles symlinks
used as Python framework references.
- Tests
- gh-131050: test_ssl.test_dh_params is skipped if the
underlying TLS library does not support finite-field
ephemeral Diffie-Hellman.
- gh-129200: Multiple iOS testbed runners can now be started
at the same time without introducing an ambiguity over
simulator ownership.
- gh-130292: The iOS testbed will now run successfully on a
machine that has not previously run Xcode tests (such as CI
configurations).
- gh-130293: The tests of terminal colorization are no longer
sensitive to the value of the TERM variable in the testing
environment.
- gh-126332: Add unit tests for pyrepl.
- Security
- gh-131809: Update bundled libexpat to 2.7.1
- gh-131261: Upgrade to libexpat 2.7.0
- gh-127371: Avoid unbounded buffering for
tempfile.SpooledTemporaryFile.writelines(). Previously,
disk spillover was only checked after the lines iterator
had been exhausted. This is now done after each line is
written.
- gh-121284: Fix bug in the folding of rfc2047 encoded-words
when flattening an email message using a modern email
policy. Previously when an encoded-word was too long for
a line, it would be decoded, split across lines, and
re-encoded. But commas and other special characters in the
original text could be left unencoded and unquoted. This
could theoretically be used to spoof header lines using
a carefully constructed encoded-word if the resulting
rendered email was transmitted or re-parsed.
- Library
- gh-132174: Fix function name in error message of
_interpreters.run_string.
- gh-132171: Fix crash of _interpreters.run_string on string
subclasses.
- gh-129204: Introduce new _PYTHON_SUBPROCESS_USE_POSIX_SPAWN
environment variable knob in subprocess to control the use
of os.posix_spawn().
- gh-132159: Do not shadow user arguments in generated
__new__() by decorator warnings.deprecated. Patch by Xuehai
Pan.
- gh-132075: Fix possible use of socket address structures
with uninitialized members. Now all structure members are
initialized with zeroes by default.
- gh-132002: Fix crash when deallocating
contextvars.ContextVar with weird unahashable string names.
- gh-131668: socket: Fix code parsing AF_BLUETOOTH socket
addresses.
- gh-131492: Fix a resource leak when constructing a
gzip.GzipFile with a filename fails, for example when
passing an invalid compresslevel.
- gh-131325: Fix sendfile fallback implementation to drain
data after writing to transport in asyncio.
- gh-129843: Fix incorrect argument passing in
warnings.warn_explicit().
- gh-131204: Use monospace font from System Font Stack for
cross-platform support in difflib.HtmlDiff.
- gh-130940: The PyConfig.use_system_logger attribute,
introduced in Python 3.13.2, has been removed. The
introduction of this attribute inadvertently introduced an
ABI breakage on macOS and iOS. The use of the system logger
is now enabled by default on iOS, and disabled by default
on macOS.
- gh-131045: Fix issue with __contains__, values, and
pseudo-members for enum.Flag.
- gh-130959: Fix pure-Python implementation of
datetime.time.fromisoformat() to reject times with spaces
in fractional part (for example, 12:34:56.400 +02:00),
matching the C implementation. Patch by Michał Gorny.
- gh-130637: Add validation for numeric response data in
poplib.POP3.stat() method
- gh-130461: Remove .. index:: directives from the uuid
module documentation. These directives previously created
entries in the general index for getnode() as well as
the uuid1(), uuid3(), uuid4(), and uuid5() constructor
functions.
- gh-130379: The zipapp module now calculates the list of
files to be added to the archive before creating the
archive. This avoids accidentally including the target when
it is being created in the source directory.
- gh-130285: Fix corner case for random.sample() allowing the
counts parameter to specify an empty population. So now,
sample([], 0, counts=[]) and sample('abc', k=0, counts=[0,
0, 0]) both give the same result as sample([], 0).
- gh-130250: Fix regression in traceback.print_last().
- gh-130230: Fix crash in pow() with only Decimal third
argument.
- gh-118761: Reverts a change in the previous release
attempting to make some stdlib imports used within the
subprocess module lazy as this was causing errors during
__del__ finalizers calling methods such as terminate, or
kill, or send_signal.
- gh-130164: Fixed failure to raise TypeError in
inspect.Signature.bind() for positional-only arguments
provided by keyword when a variadic keyword argument (e.g.
--kwargs) is present.
- gh-130151: Fix reference leaks in _hashlib.hmac_new() and
_hashlib.hmac_digest(). Patch by Bénédikt Tran.
- gh-130145: Fix asyncio.AbstractEventloop.run_forever() when
another loop is already running.
- gh-129726: Fix gzip.GzipFile raising an unraisable
exception during garbage collection when referring to
a temporary object by breaking the reference loop with
weakref.
- gh-127750: Remove broken functools.singledispatchmethod()
caching introduced in gh-85160.
- gh-129583: Update bundled pip to 25.0.1
- gh-97850: Update the deprecation warning of
importlib.abc.Loader.load_module().
- gh-129646: Update the locale alias mapping in the locale
module to match the latest X Org locale alias mapping and
support new locales in Glibc 2.41.
- gh-129603: Fix bugs where sqlite3.Row objects could
segfault if their inherited description was set to
None. Patch by Erlend Aasland.
- gh-128231: Execution of multiple statements in the new
REPL now stops immediately upon the first exception
encountered. Patch by Bartosz Sławecki.
- gh-117779: Fix reading duplicated entries in zipfile by
name. Reading duplicated entries (except the last one)
by ZipInfo now emits a warning instead of raising an
exception.
- gh-128772: Fix pydoc for methods with the __module__
attribute equal to None.
- gh-92897: Scheduled the deprecation of the check_home
argument of sysconfig.is_python_build() to Python 3.15.
- gh-128657: Fix possible extra reference when using objects
returned by hashlib.sha256() under free threading.
- gh-128703: Fix mimetypes.guess_type() to use default
mapping for empty Content-Type in registry.
- gh-128308: Support the name keyword argument
for eager tasks in asyncio.loop.create_task(),
asyncio.create_task() and asyncio.TaskGroup.create_task(),
by passing on all kwargs to the task factory set by
asyncio.loop.set_task_factory().
- gh-128388: Fix PyREPL on Windows to support more
keybindings, like the Control-← and Control-→ word-skipping
keybindings and those with meta (i.e. Alt), e.g. Alt-d to
kill-word or Alt-Backspace backward-kill-word.
- gh-126037: xml.etree.ElementTree: Fix a crash in
Element.find, Element.findtext and Element.findall when
the tag to find implements an __eq__() method mutating the
element being queried. Patch by Bénédikt Tran.
- gh-127712: Fix handling of the secure argument of
logging.handlers.SMTPHandler.
- gh-126033: xml.etree.ElementTree: Fix a crash in
Element.remove when the element is concurrently
mutated. Patch by Bénédikt Tran.
- gh-118201: Fixed intermittent failures of os.confstr,
os.pathconf and os.sysconf on iOS and Android.
- gh-124927: Non-printing characters are now properly handled
in the new REPL.
- IDLE
- gh-129873: Simplify displaying the IDLE doc by only copying
the text section of idle.html to idlelib/help.html. Patch
by Stan Ulbrych.
- Documentation
- gh-131417: Mention asyncio.Future and asyncio.Task in
generic classes list.
- gh-125722: Require Sphinx 8.2.0 or later to build the
Python documentation. Patch by Adam Turner.
- gh-129712: The wheel tags supported by each macOS universal
SDK option are now documented.
- gh-46236: C API: Document PyUnicode_RSplit(),
PyUnicode_Partition() and PyUnicode_RPartition().
- Core and Builtins
- gh-132011: Fix crash when calling list.append() as an
unbound method.
- gh-131998: Fix a crash when using an unbound method
descriptor object in a function where a bound method
descriptor was used.
- gh-131988: Fix a performance regression that caused scaling
bottlenecks in the free threaded build in 3.13.1 and
3.13.2.
- gh-131719: Fix missing NULL check in _PyMem_FreeDelayed in
free-threaded build.
- gh-131670: Fix anext() failing on sync __anext__() raising
an exception.
- gh-131141: Fix data race in sys.monitoring instrumentation
while registering callback.
- gh-130932: Fix incorrect exception handling in
_PyModule_IsPossiblyShadowing
- gh-130851: Fix a crash in the free threading build when
constructing a code object with co_consts that contains
instances of types that are not otherwise generated by the
bytecode compiler.
- gh-130794: Fix memory leak in the free threaded build
when resizing a shared list or dictionary from multiple
short-lived threads.
- gh-130775: Do not crash on negative column and end_column
in ast locations.
- gh-130382: Fix PyRefTracer_DESTROY not being sent from
Python/ceval.c Py_DECREF().
- gh-130618: Fix a bug that was causing UnicodeDecodeError or
SystemError to be raised when using f-strings with lambda
expressions with non-ASCII characters. Patch by Pablo
Galindo
- gh-130163: Fix possible crashes related to concurrent
change and use of the sys module attributes.
- gh-88887: Fixing multiprocessing Resource Tracker process
leaking, usually observed when running Python as PID 1.
- gh-130115: Fix an issue with thread identifiers being
sign-extended on some platforms.
- gh-128396: Fix a crash that occurs when calling locals()
inside an inline comprehension that uses the same local
variable as the outer frame scope where the variable is a
free or cell var.
- gh-116042: Fix location for SyntaxErrors of invalid escapes
in the tokenizer. Patch by Pablo Galindo
- gh-129983: Fix data race in compile_template in sre.c.
- gh-129967: Fix a race condition in the free threading build
when repr(set) is called concurrently with set.clear().
- gh-129900: Fix return codes inside SystemExit not getting
returned by the REPL.
- gh-129732: Fixed a race in _Py_qsbr_reserve in the free
threading build.
- gh-129643: Fix thread safety of PyList_Insert() in
free-threading builds.
- gh-129668: Fix race condition when raising MemoryError in
the free threaded build.
- gh-129643: Fix thread safety of PyList_SetItem() in
free-threading builds. Patch by Kumar Aditya.
- gh-128714: Fix the potential races in get/set dunder
methods __annotations__, __annotate__ and __type_params__
for function object, and add related tests.
- gh-128632: Disallow __classdict__ as the name of a type
parameter. Using this name would previously crash the
interpreter in some circumstances.
- gh-127953: The time to handle a LINE event in
sys.monitoring (and sys.settrace) is now independent of the
number of lines in the code object.
- gh-125331: from __future__ import barry_as_FLUFL now works
in more contexts, including when it is used in files,
with the -c flag, and in the REPL when there are multiple
statements on the same line. Previously, it worked only
on subsequent lines in the REPL, and when the appropriate
flags were passed directly to compile(). Patch by Pablo
Galindo.
- C API
- gh-131740: Update PyUnstable_GC_VisitObjects to traverse
perm gen.
- gh-129533: Update PyGC_Enable(), PyGC_Disable(),
PyGC_IsEnabled() to use atomic operation for thread-safety
at free-threading build. Patch by Donghee Na.
- Build
- gh-131865: The DTrace build now properly passes the CC
and CFLAGS variables to the dtrace command when utilizing
SystemTap on Linux.
- gh-131675: Fix mimalloc library builds for 32-bit ARM
targets.
- gh-130673: Fix potential KeyError when handling object
sections during JIT building process.
- gh-130740: Ensure that Python.h is included before
stdbool.h unless pyconfig.h is included before or in some
platform-specific contexts.
- gh-129838: Don’t redefine _Py_NO_SANITIZE_UNDEFINED when
compiling with a recent GCC version and undefined sanitizer
enabled.
- gh-129660: Drop test_embed from PGO training, whose
contribution in recent versions is considered to be
ignorable.
- Changes from version 3.13.2:
- Tools/Demos
- gh-128152: Fix a bug where Argument Clinic’s C
pre-processor parser tried to parse pre-processor
directives inside C comments. Patch by Erlend Aasland.
- Tests
- gh-127906: Test the limited C API in test_cppext. Patch by
Victor Stinner.
- gh-127637: Add tests for the dis command-line
interface. Patch by Bénédikt Tran.
- gh-126925: iOS test results are now streamed during test
execution, and the deprecated xcresulttool is no longer
used.
- Security
- gh-105704: When using urllib.parse.urlsplit() and
urllib.parse.urlparse() host parsing would not reject
domain names containing square brackets ([ and ]). Square
brackets are only valid for IPv6 and IPvFuture hosts
according to RFC 3986 Section 3.2.2. (CVE-2025-0938,
bsc#1236705)
- gh-127655: Fixed the
asyncio.selector_events._SelectorSocketTransport
transport not pausing writes for the protocol when
the buffer reaches the high water mark when using
asyncio.WriteTransport.writelines() (CVE-2024-12254,
bsc#1234290).
- gh-126108: Fix a possible NULL pointer dereference in
PySys_AddWarnOptionUnicode().
- gh-80222: Fix bug in the folding of quoted strings
when flattening an email message using a modern email
policy. Previously when a quoted string was folded so
that it spanned more than one line, the surrounding
quotes and internal escapes would be omitted. This could
theoretically be used to spoof header lines using a
carefully constructed quoted string if the resulting
rendered email was transmitted or re-parsed.
- gh-119511: Fix a potential denial of service in the imaplib
module. When connecting to a malicious server, it could
cause an arbitrary amount of memory to be allocated. On
many systems this is harmless as unused virtual memory is
only a mapping, but if this hit a virtual address size
limit it could lead to a MemoryError or other process
crash. On unusual systems or builds where all allocated
memory is touched and backed by actual ram or storage
it could’ve consumed resources doing so until similarly
crashing.
- Library
- gh-129502: Unlikely errors in preparing arguments for
ctypes callback are now handled in the same way as errors
raised in the callback of in converting the result of
the callback – using sys.unraisablehook() instead of
sys.excepthook() and not setting sys.last_exc and other
variables.
- gh-129403: Corrected ValueError message for asyncio.Barrier
and threading.Barrier.
- gh-129409: Fix an integer overflow in the csv module when
writing a data field larger than 2GB.
- gh-118761: Improve import time of subprocess by lazy
importing locale and signal. Patch by Taneli Hukkinen.
- gh-129346: In sqlite3, handle out-of-memory when creating
user-defined SQL functions.
- gh-129061: Fix FORCE_COLOR and NO_COLOR when empty
strings. Patch by Hugo van Kemenade.
- gh-128550: Removed an incorrect optimization relating
to eager tasks in asyncio.TaskGroup that resulted in
cancellations being missed.
- gh-128991: Release the enter frame reference within bdb
callback
- gh-128978: Fix a NameError in
sysconfig.expand_makefile_vars(). Patch by Bénédikt Tran.
- gh-128961: Fix a crash when setting state on an exhausted
array.array iterator.
- gh-128894: Fix
traceback.TracebackException._format_syntax_error not to
fail on exceptions with custom metadata.
- gh-128916: Do not attempt to set SO_REUSEPORT on sockets of
address families other than AF_INET and AF_INET6, as it is
meaningless with these address families, and the call with
fail with Linux kernel 6.12.9 and newer.
- gh-128679: Fix tracemalloc.stop() race condition. Fix
tracemalloc to support calling tracemalloc.stop() in
one thread, while another thread is tracing memory
allocations. Patch by Victor Stinner.
- gh-128636: Fix PyREPL failure when os.environ is
overwritten with an invalid value.
- gh-128562: Fix possible conflicts in generated tkinter
widget names if the widget class name ends with a digit.
- gh-128498: Default to stdout isatty for color detection
instead of stderr. Patch by Hugo van Kemenade.
- gh-128552: Fix cyclic garbage introduced
by asyncio.loop.create_task() and
asyncio.TaskGroup.create_task() holding a reference to the
created task if it is eager.
- gh-128479: Fix asyncio.staggered.staggered_race() leaking
tasks and issuing an unhandled exception.
- gh-128400: Fix crash when using
faulthandler.dump_traceback() while other threads are
active on the free threaded build.
- gh-88834: Unify the instance check for typing.Union and
types.UnionType: Union now uses the instance checks against
its parameters instead of the subclass checks.
- gh-128302: Fix
xml.dom.xmlbuilder.DOMEntityResolver.resolveEntity(), which
was broken by the Python 3.0 transition.
- gh-128302: Allow xml.dom.xmlbuilder.DOMParser.parse()
to correctly handle xml.dom.xmlbuilder.DOMInputSource
instances that only have a systemId attribute set.
- gh-112064: Fix incorrect handling of negative read sizes in
HTTPResponse.read. Patch by Yury Manushkin.
- gh-58956: Fixed a frame reference leak in bdb.
- gh-128131: Completely support random access of uncompressed
unencrypted read-only zip files obtained by ZipFile.open.
- gh-112328: enum.EnumDict can now be used without resorting
to private API.
- gh-127975: Avoid reusing quote types in ast.unparse() if
not needed.
- gh-128062: Revert the font of turtledemo’s menu bar to its
default value and display the shortcut keys in the correct
position.
- gh-128014: Fix resetting the default window icon by passing
default='' to the tkinter method wm_iconbitmap().
- gh-115514: Fix exceptions and incomplete writes after
asyncio._SelectorTransport is closed before writes are
completed.
- gh-41872: Fix quick extraction of module docstrings from
a file in pydoc. It now supports docstrings with single
quotes, escape sequences, raw string literals, and other
Python syntax.
- gh-127060: Set TERM environment variable to “dumb” to
disable traceback colors in IDLE, since IDLE doesn’t
understand ANSI escape sequences. Patch by Victor Stinner.
- gh-126742: Fix support of localized error messages reported
by dlerror(3) and gdbm_strerror in ctypes and dbm.gnu
functions respectively. Patch by Bénédikt Tran.
- gh-127873: When -E is set, only ignore PYTHON_COLORS
and not FORCE_COLOR/NO_COLOR/TERM when colourising
output. Patch by Hugo van Kemenade.
- gh-127870: Detect recursive calls in ctypes _as_parameter_
handling. Patch by Victor Stinner.
- gh-127847: Fix the position when doing interleaved seeks
and reads in uncompressed, unencrypted zip files returned
by zipfile.ZipFile.open().
- gh-127732: The platform module now correctly detects
Windows Server 2025.
- gh-126821: macOS and iOS apps can now choose to redirect
stdout and stderr to the system log during interpreter
configuration.
- gh-93312: Include <sys/pidfd.h> to get os.PIDFD_NONBLOCK
constant. Patch by Victor Stinner.
- gh-83662: Add missing __class_getitem__ method to the
Python implementation of functools.partial(), to make it
compatible with the C version. This is mainly relevant for
alternative Python implementations like PyPy and GraalPy,
because CPython will usually use the C-implementation of
that function.
- gh-127586: multiprocessing.pool.Pool now properly restores
blocked signal handlers of the parent thread when creating
processes via either spawn or forkserver.
- gh-98188: Fix an issue in
email.message.Message.get_payload() where data cannot be
decoded if the Content Transfer Encoding mechanism contains
trailing whitespaces or additional junk text. Patch by Hui
Liu.
- gh-127257: In ssl, system call failures that OpenSSL
reports using ERR_LIB_SYS are now raised as OSError.
- gh-127096: Do not recreate unnamed section on every read in
configparser.ConfigParser. Patch by Andrey Efremov.
- gh-127196: Fix crash when dict with keys in invalid
encoding were passed to several functions in _interpreters
module.
- gh-126775: Make linecache.checkcache() thread safe and GC
re-entrancy safe.
- gh-126332: Fix _pyrepl crash when entering a double CTRL-Z
on an overflowing line.
- gh-126225: getopt and optparse are no longer marked as
deprecated. There are legitimate reasons to use one of
these modules in preference to argparse, and none of these
modules are at risk of being removed from the standard
library. Of the three, argparse remains the recommended
default choice, unless one of the concerns noted at the top
of the optparse module documentation applies.
- gh-125553: Fix round-trip invariance for backslash
continuations in tokenize.untokenize().
- gh-123987: Fixed issue in NamespaceReader where a non-path
item in a namespace path, such as a sentinel added by an
editable installer, would break resource loading.
- gh-123401: The http.cookies module now supports parsing
obsolete RFC 850 date formats, in accordance with RFC 9110
requirements. Patch by Nano Zheng.
- gh-122431: readline.append_history_file() now raises a
ValueError when given a negative value.
- gh-119257: Show tab completions menu below the current
line, which results in less janky behaviour, and fixes a
cursor movement bug. Patch by Daniel Hollas
- Documentation
- gh-125722: Require Sphinx 8.1.3 or later to build the
Python documentation. Patch by Adam Turner.
- gh-67206: Document that string.printable is not
printable in the POSIX sense. In particular,
string.printable.isprintable() returns False. Patch by
Bénédikt Tran.
- Core and Builtins
- gh-129345: Fix null pointer dereference in syslog.openlog()
when an audit hook raises an exception.
- gh-129093: Fix f-strings such as f'{expr=}' sometimes not
displaying the full expression when the expression contains
!=.
- gh-124363: Treat debug expressions in f-string as raw
strings. Patch by Pablo Galindo
- gh-128799: Add frame of except* to traceback when it wraps
a naked exception.
- gh-128078: Fix a SystemError when using anext() with a
default tuple value. Patch by Bénédikt Tran.
- gh-128717: Fix a crash when setting the recursion limit
while other threads are active on the free threaded build.
- gh-128330: Restore terminal control characters on REPL
exit.
- gh-128079: Fix a bug where except* does not properly check
the return value of an ExceptionGroup’s split() function,
leading to a crash in some cases. Now when split() returns
an invalid object, except* raises a TypeError with the
original raised ExceptionGroup object chained to it.
- gh-128030: Avoid error from calling
PyModule_GetFilenameObject on a non-module object when
importing a non-existent symbol from a non-module object.
- gh-127903: Objects/unicodeobject.c: fix a crash on DEBUG
builds in _copy_characters when there is nothing to copy.
- gh-127599: Fix statistics for increments of object
reference counts (in particular, when a reference count was
increased by more than 1 in a single operation).
- gh-127651: When raising ImportError for missing symbols
in from imports, use __file__ in the error message if
__spec__.origin is not a location
- gh-127582: Fix non-thread-safe object resurrection when
calling finalizers and watcher callbacks in the free
threading build.
- gh-127434: The iOS compiler shims can now accept arguments
with spaces.
- gh-127536: Add missing locks around some list assignment
operations in the free threading build.
- gh-126862: Fix a possible overflow when a class inherits
from an absurd number of super-classes. Reported by Valery
Fedorenko. Patch by Bénédikt Tran.
- gh-127349: Fixed the error when resizing terminal in Python
REPL. Patch by Semyon Moroz.
- gh-126076: Relocated objects such as tuple, bytes and
str objects are properly tracked by tracemalloc and its
associated hooks. Patch by Pablo Galindo.
- C API
- gh-127791: Fix loss of callbacks after more than one call
to PyUnstable_AtExit().
- Build
- gh-129539: Don’t redefine EX_OK when the system has the
sysexits.h header.
- gh-128472: Skip BOLT optimization of functions using
computed gotos, fixing errors on build with LLVM 19.
- gh-123925: Fix building the curses module on platforms with
libncurses but without libncursesw.
- gh-128321: Set LIBS instead of LDFLAGS when checking if
sqlite3 library functions are available. This fixes the
ordering of linked libraries during checks, which was
incorrect when using a statically linked libsqlite3.
- gh-127865: Fix build failure on systems without
thread-locals support.
- Changes from version 3.13.1:
- Tools/Demos
- gh-126807: Fix extraction warnings in pygettext.py caused
by mistaking function definitions for function calls.
- gh-126167: The iOS testbed was modified so that it can be
used by third-party projects for testing purposes.
- Tests
- gh-126909: Fix test_os extended attribute tests to work on
filesystems with 1 KiB xattr size limit.
- gh-125041: Re-enable skipped tests for zlib on the
s390x architecture: only skip checks of the compressed
bytes, which can be different between zlib’s software
implementation and the hardware-accelerated implementation.
- gh-124295: Add translation tests to the argparse module.
- Security
- gh-126623: Upgrade libexpat to 2.6.4
- gh-125140: Remove the current directory from sys.path when
using PyREPL.
- gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
consistently use the mapped IPv4 address value for deciding
properties. Properties which have their behavior fixed are
is_multicast, is_reserved, is_link_local, is_global, and
is_unspecified.
- Library
- gh-127321: pdb.set_trace() will not stop at an opcode that
does not have an associated line number anymore.
- gh-127303: Publicly expose EXACT_TOKEN_TYPES in
token.__all__.
- gh-123967: Fix faulthandler for trampoline frames. If the
top-most frame is a trampoline frame, skip it. Patch by
Victor Stinner.
- gh-127182: Fix io.StringIO.__setstate__() crash, when None
was passed as the first value.
- gh-127217: Fix urllib.request.pathname2url() for paths
starting with multiple slashes on Posix.
- gh-127035: Fix shutil.which on Windows. Now it looks at
direct match if and only if the command ends with a PATHEXT
extension or X_OK is not in mode. Support extensionless
files if “.” is in PATHEXT. Support PATHEXT extensions that
end with a dot.
- gh-122273: Support PyREPL history on Windows. Patch by
devdanzin and Victor Stinner.
- gh-127078: Fix issue where urllib.request.url2pathname()
failed to discard an extra slash before a UNC drive in the
URL path on Windows.
- gh-126766: Fix issue where urllib.request.url2pathname()
failed to discard any ‘localhost’ authority present in the
URL.
- gh-127065: Fix crash when calling a operator.methodcaller()
instance from multiple threads in the free threading build.
- gh-126997: Fix support of STRING and GLOBAL opcodes with
non-ASCII arguments in pickletools. pickletools.dis()
now outputs non-ASCII bytes in STRING, BINSTRING and
SHORT_BINSTRING arguments as escaped (\xXX).
- gh-126316: grp: Make grp.getgrall() thread-safe by adding a
mutex. Patch by Victor Stinner.
- gh-126618: Fix the representation of itertools.count
objects when the count value is sys.maxsize.
- gh-85168: Fix issue where urllib.request.url2pathname() and
pathname2url() always used UTF-8 when quoting and unquoting
file URIs. They now use the filesystem encoding and error
handler.
- gh-67877: Fix memory leaks when regular expression matching
terminates abruptly, either because of a signal or because
memory allocation fails.
- gh-126789: Fixed the values of sysconfig.get_config_vars(),
sysconfig.get_paths(), and their siblings when the site
initialization happens after sysconfig has built a cache
for sysconfig.get_config_vars().
- gh-126188: Update bundled pip to 24.3.1
- gh-126780: Fix os.path.normpath() for drive-relative paths
on Windows.
- gh-126766: Fix issue where urllib.request.url2pathname()
failed to discard two leading slashes introducing an empty
authority section.
- gh-126727: locale.nl_langinfo(locale.ERA) now returns
multiple era description segments separated by
semicolons. Previously it only returned the first segment
on platforms with Glibc.
- gh-126699: Allow collections.abc.AsyncIterator to be a base
for Protocols.
- gh-126654: Fix crash when non-dict was passed to several
functions in _interpreters module.
- gh-104745: Limit starting a patcher (from
unittest.mock.patch() or unittest.mock.patch.object()) more
than once without stopping it
- gh-126595: Fix a crash when instantiating itertools.count
with an initial count of sys.maxsize on debug builds. Patch
by Bénédikt Tran.
- gh-120423: Fix issue where urllib.request.pathname2url()
mishandled Windows paths with embedded forward slashes.
- gh-126565: Improve performances of zipfile.Path.open() for
non-reading modes.
- gh-126505: Fix bugs in compiling case-insensitive regular
expressions with character classes containing non-BMP
characters: upper-case non-BMP character did was ignored
and the ASCII flag was ignored when matching a character
range whose upper bound is beyond the BMP region.
- gh-117378: Fixed the multiprocessing 'forkserver'
start method forkserver process to correctly inherit
the parent’s sys.path during the importing of
multiprocessing.set_forkserver_preload() modules in the
same manner as sys.path is configured in workers before
executing work items.
- This bug caused some forkserver module preloading to
silently fail to preload. This manifested as a performance
degration in child processes when the sys.path was required
due to additional repeated work in every worker.
- It could also have a side effect of '' remaining in
sys.path during forkserver preload imports instead of the
absolute path from os.getcwd() at multiprocessing import
time used in the worker sys.path.
- The sys.path differences between phases in the child
process could potentially have caused preload to import
incorrect things from the wrong location. We are unaware of
that actually having happened in practice.
- gh-125679: The multiprocessing.Lock and
multiprocessing.RLock repr values no longer say “unknown”
on macOS.
- gh-126476: Raise calendar.IllegalMonthError (now a subclass
of IndexError) for calendar.month() when the input month is
not correct.
- gh-126489: The Python implementation of pickle no longer
calls pickle.Pickler.persistent_id() for the result of
persistent_id().
- gh-126313: Fix an issue in curses.napms() when
curses.initscr() has not yet been called. Patch by Bénédikt
Tran.
- gh-126303: Fix pickling and copying of os.sched_param
objects.
- gh-126138: Fix a use-after-free crash on asyncio.Task
objects whose underlying coroutine yields an object that
implements an evil __getattribute__(). Patch by Nico
Posada.
- gh-126220: Fix crash in cProfile.Profile and
_lsprof.Profiler when their callbacks were directly called
with 0 arguments.
- gh-126212: Fix issue where urllib.request.pathname2url()
and url2pathname() removed slashes from Windows DOS drive
paths and URLs.
- gh-126223: Raise a UnicodeEncodeError instead of a
SystemError upon calling _interpreters.create() with an
invalid Unicode character.
- gh-126205: Fix issue where urllib.request.pathname2url()
generated URLs beginning with four slashes (rather than
two) when given a Windows UNC path.
- gh-126105: Fix a crash in ast when the ast.AST._fields
attribute is deleted.
- gh-126106: Fixes a possible NULL pointer dereference in
ssl.
- gh-126080: Fix a use-after-free crash on asyncio.Task
objects for which the underlying event loop implements an
evil __getattribute__(). Reported by Nico-Posada. Patch by
Bénédikt Tran.
- gh-126083: Fixed a reference leak in asyncio.Task objects
when reinitializing the same object with a non-None
context. Patch by Nico Posada.
- gh-125984: Fix use-after-free crashes on asyncio.Future
objects for which the underlying event loop implements an
evil __getattribute__(). Reported by Nico-Posada. Patch by
Bénédikt Tran.
- gh-125969: Fix an out-of-bounds crash when an evil
asyncio.loop.call_soon() mutates the length of the internal
callbacks list. Patch by Bénédikt Tran.
- gh-125966: Fix a use-after-free crash in
asyncio.Future.remove_done_callback(). Patch by Bénédikt
Tran.
- gh-125789: Fix possible crash when mutating list of
callbacks returned by asyncio.Future._callbacks. It
now always returns a new copy in C implementation
_asyncio. Patch by Kumar Aditya.
- gh-124452: Fix an issue in
email.policy.EmailPolicy.header_source_parse() and
email.policy.Compat32.header_source_parse() that introduced
spurious leading whitespaces into header values when the
header includes a newline character after the header name
delimiter (:) and before the value.
- gh-125884: Fixed the bug for pdb where it can’t set
breakpoints on functions with certain annotations.
- gh-125355: Fix several bugs in
argparse.ArgumentParser.parse_intermixed_args().
- The parser no longer changes temporarily during
parsing.
- Default values are not processed twice.
- Required mutually exclusive groups containing
positional arguments are now supported.
- The missing arguments report now includes the names of
all required optional and positional arguments.
- Unknown options can be intermixed with positional
arguments in parse_known_intermixed_args().
- gh-125666: Avoid the exiting the interpreter if a null byte
is given as input in the new REPL.
- gh-125710: [Enum] fix hashable<->nonhashable comparisons
for member values
- gh-125631: Restore ability to set persistent_id and
persistent_load attributes of instances of the Pickler and
Unpickler classes in the pickle module.
- gh-125378: Fixed the bug in pdb where after a multi-line
command, an empty line repeats the first line of the
multi-line command, instead of the full command.
- gh-125682: Reject non-ASCII digits in the Python
implementation of json.loads() conforming to the JSON
specification.
- gh-125660: Reject invalid unicode escapes for Python
implementation of json.loads().
- gh-125259: Fix the notes removal logic for errors thrown in
enum initialization.
- gh-125590: Allow FrameLocalsProxy to delete and pop if the
key is not a fast variable.
- gh-125519: Improve traceback if importlib.reload() is
called with an object that is not a module. Patch by Alex
Waygood.
- gh-125451: Fix deadlock when
concurrent.futures.ProcessPoolExecutor shuts down
concurrently with an error when feeding a job to a worker
process.
- gh-125422: Fixed the bug where pdb and bdb can step into
the bottom caller frame.
- gh-100141: Fixed the bug where pdb will be stuck in an
infinite loop when debugging an empty file.
- gh-125115: Fixed a bug in pdb where arguments starting with
- can’t be passed to the debugged script.
- gh-53203: Fix time.strptime() for %c, %x and %X formats
in many locales that use non-ASCII digits, like Persian,
Burmese, Odia and Shan.
- gh-125398: Fix the conversion of the VIRTUAL_ENV path in
the activate script in venv when running in Git Bash for
Windows.
- gh-125316: Fix using functools.partial() as enum.Enum
member. A FutureWarning with suggestion to use
enum.member() is now emitted when the partial instance is
used as an enum member.
- gh-125245: Fix race condition when importing
collections.abc, which could incorrectly return an empty
module.
- gh-125243: Fix data race when creating zoneinfo.ZoneInfo
objects in the free threading build.
- gh-125254: Fix a bug where ArgumentError includes the
incorrect ambiguous option in argparse.
- gh-125235: Keep tkinter TCL paths in venv pointing to base
installation on Windows.
- gh-61011: Fix inheritance of nested mutually
exclusive groups from parent parser in
argparse.ArgumentParser. Previously, all nested mutually
exclusive groups lost their connection to the group
containing them and were displayed as belonging directly to
the parser.
- gh-52551: Fix encoding issues in time.strftime(), the
strftime() method of the datetime classes datetime, date
and time and formatting of these classes. Characters
not encodable in the current locale are now acceptable
in the format string. Surrogate pairs and sequence
of surrogatescape-encoded bytes are no longer
recombinated. Embedded null character no longer terminates
the format string.
- gh-125118: Don’t copy arbitrary values to _Bool in the
struct module.
- gh-125069: Fix an issue where providing a pathlib.PurePath
object as an initializer argument to a second PurePath
object with a different parser resulted in arguments to
the former object’s initializer being joined by the latter
object’s parser.
- gh-125096: If the PYTHON_BASIC_REPL environment variable
is set, the site module no longer imports the _pyrepl
module. Moreover, the site module now respects -E and -I
command line options: ignore PYTHON_BASIC_REPL in this
case. Patch by Victor Stinner.
- gh-124969: Fix locale.nl_langinfo(locale.ALT_DIGITS) on
platforms with glibc. Now it returns a string consisting of
up to 100 semicolon-separated symbols (an empty string in
most locales) on all Posix platforms. Previously it only
returned the first symbol or an empty string.
- gh-124960: Fix support for the barry_as_FLUFL future flag
in the new REPL.
- gh-124984: Fixed thread safety in ssl in the free-threaded
build. OpenSSL operations are now protected by a per-object
lock.
- gh-124958: Fix refcycles in exceptions raised from
asyncio.TaskGroup and the python implementation of
asyncio.Future
- gh-53203: Fix time.strptime() for %c and %x formats in many
locales: Arabic, Bislama, Breton, Bodo, Kashubian, Chuvash,
Estonian, French, Irish, Ge’ez, Gurajati, Manx Gaelic,
Hebrew, Hindi, Chhattisgarhi, Haitian Kreyol, Japanese,
Kannada, Korean, Marathi, Malay, Norwegian, Nynorsk,
Punjabi, Rajasthani, Tok Pisin, Yoruba, Yue Chinese,
Yau/Nungon and Chinese.
- gh-124917: Allow calling os.path.exists() and
os.path.lexists() with keyword arguments on Windows. Fixes
a regression in 3.13.0.
- gh-124653: Fix detection of the minimal Queue API needed by
the logging module. Patch by Bénédikt Tran.
- gh-124858: Fix reference cycles left in tracebacks
in asyncio.open_connection() when used with
happy_eyeballs_delay
- gh-124390: Fixed AssertionError when using
asyncio.staggered.staggered_race() with
asyncio.eager_task_factory.
- gh-124651: Properly quote template strings in venv
activation scripts (bsc#1232241, CVE-2024-9287).
- gh-116850: Fix argparse for namespaces with not directly
writable dict (e.g. classes).
- gh-58573: Fix conflicts between abbreviated long options in
the parent parser and subparsers in argparse.
- gh-124594: All asyncio REPL prompts run in the same
context. Contributed by Bartosz Sławecki.
- gh-61181: Fix support of choices with string value in
argparse. Substrings of the specified string no longer
considered valid values.
- gh-80259: Fix argparse support of positional arguments with
nargs='?', default=argparse.SUPPRESS and specified type.
- gh-120378: Fix a crash related to an integer overflow in
curses.resizeterm() and curses.resize_term().
- gh-123884: Fixed bug in itertools.tee() handling of other
tee inputs (a tee in a tee). The output now has the
promised n independent new iterators. Formerly, the first
iterator was identical (not independent) to the input
iterator. This would sometimes give surprising results.
- gh-58956: Fixed a bug in pdb where sometimes the breakpoint
won’t trigger if it was set on a function which is already
in the call stack.
- gh-124345: argparse vim supports abbreviated single-dash
long options separated by = from its value.
- gh-104860: Fix disallowing abbreviation of single-dash long
options in argparse with allow_abbrev=False.
- gh-63143: Fix parsing mutually exclusive arguments in
argparse. Arguments with the value identical to the default
value (e.g. booleans, small integers, empty or 1-character
strings) are no longer considered “not present”.
- gh-72795: Positional arguments with nargs equal to '*' or
argparse.REMAINDER are no longer required. This allows to
use positional argument with nargs='*' and without default
in mutually exclusive group and improves error message
about required arguments.
- gh-59317: Fix parsing positional argument with nargs equal
to '?' or '*' if it is preceded by an option and another
positional argument.
- gh-53780: argparse now ignores the first '--' (double dash)
between an option and command.
- gh-124217: Add RFC 9637 reserved IPv6 block 3fff::/20 in
ipaddress module.
- gh-81691: Fix handling of multiple '--' (double dashes)
in argparse. Only the first one has now been removed, all
subsequent ones are now taken literally.
- gh-123978: Remove broken time.thread_time() and
time.thread_time_ns() on NetBSD.
- gh-124008: Fix possible crash (in debug build), incorrect
output or returning incorrect value from raw binary write()
when writing to console on Windows.
- gh-123935: Fix parent slots detection for dataclasses that
inherit from classes with __dictoffset__.
- gh-122765: Fix unbalanced quote errors occurring when
activate.csh in venv was sourced with a custom prompt
containing unpaired quotes or newlines.
- gh-123370: Fix the canvas not clearing after running
turtledemo clock.
- gh-116810: Resolve a memory leak introduced in CPython
3.10’s ssl when the ssl.SSLSocket.session property was
accessed. Speeds up read and write access to said property
by no longer unnecessarily cloning session objects via
serialization.
- gh-120754: Update unbounded read calls in zipfile to
specify an explicit size putting a limit on how much data
they may read. This also updates handling around ZIP max
comment size to match the standard instead of reading
comments that are one byte too long.
- gh-70764: Fixed an issue where inspect.getclosurevars()
would incorrectly classify an attribute name as a global
variable when the name exists both as an attribute name and
a global variable.
- gh-118289: posixpath.realpath() now raises
NotADirectoryError when strict mode is enabled and a
non-directory path with a trailing slash is supplied.
- gh-119826: Always return an absolute path for
os.path.abspath() on Windows.
- gh-117766: Always use str() to print choices in argparse.
- gh-101955: Fix SystemError when match regular expression
pattern containing some combination of possessive
quantifier, alternative and capture group.
- gh-88110: Fixed multiprocessing.Process reporting a
.exitcode of 1 even on success when using the 'fork' start
method while using a concurrent.futures.ThreadPoolExecutor.
- gh-71936: Fix a race condition in
multiprocessing.pool.Pool.
- bpo-46128: Strip unittest.IsolatedAsyncioTestCase stack
frames from reported stacktraces.
- bpo-14074: Fix argparse metavar processing to allow
positional arguments to have a tuple metavar.
- IDLE
- gh-122392: Increase currently inadequate vertical spacing
for the IDLE browsers (path, module, and stack) on
high-resolution monitors.
- Documentation
- gh-126622: Added stub pages for removed modules explaining
their removal, where to find replacements, and linking to
the last Python version that supported them. Contributed by
Ned Batchelder.
- gh-125277: Require Sphinx 7.2.6 or later to build the
Python documentation. Patch by Adam Turner.
- gh-124872: Added definitions for context, current
context, and context management protocol, updated
related definitions to be consistent, and expanded the
documentation for contextvars.Context.
- gh-125018: The importlib.metadata documentation now
includes semantic cross-reference targets for the
significant documented APIs. This means intersphinx
references like importlib.metadata.version() will now work
as expected.
- gh-70870: Clarified the dual usage of the term “free
variable” (both the formal meaning of any reference
to names defined outside the local scope, and the
narrower pragmatic meaning of nonlocal variables named in
co_freevars).
- gh-121277: Writers of CPython’s documentation can now use
next as the version for the versionchanged, versionadded,
deprecated directives.
- gh-60712: Include the object type in the lists of
documented types. Change by Furkan Onder and Martin Panter.
- bpo-34008: The Py_Main() documentation moved from the
“Very High Level API” section to the “Initialization and
Finalization” section.
- Also make it explicit that we expect Py_Main to
typically be called instead of Py_Initialize rather
than after it (since Py_Main makes its own call to
Py_Initialize). Document that calling both is supported
but is version dependent on which settings will be applied
correctly.
- Core and Builtins
- gh-113841: Fix possible undefined behavior division by zero
in complex’s _Py_c_pow().
- gh-127020: Fix a crash in the free threading build
when PyCode_GetCode(), PyCode_GetVarnames(),
PyCode_GetCellvars(), or PyCode_GetFreevars() were called
from multiple threads at the same time.
- gh-126980: Fix __buffer__() of bytearray crashing when READ
or WRITE are passed as flags.
- gh-126881: Fix crash in finalization of dtoa state. Patch
by Kumar Aditya.
- gh-126341: Now ValueError is raised instead of SystemError
when trying to iterate over a released memoryview object.
- gh-126688: Fix a crash when calling os.fork() on some
operating systems, including SerenityOS.
- gh-126066: Fix importlib to not write an incomplete
.pyc files when a ulimit or some other operating system
mechanism is preventing the write to go through fully.
- gh-126312: Fix crash during garbage collection on an object
frozen by gc.freeze() on the free-threaded build.
- gh-126139: Provide better error location when attempting to
use a future statement with an unknown future feature.
- gh-126018: Fix a crash in sys.audit() when passing a
non-string as first argument and Python was compiled in
debug mode.
- gh-125942: On Android, the errors setting of sys.stdout was
changed from surrogateescape to backslashreplace.
- gh-125859: Fix a crash in the free threading build when
gc.get_objects() or gc.get_referrers() is called during an
in-progress garbage collection.
- gh-125703: Correctly honour tracemalloc hooks in
specialized Py_DECREF paths. Patch by Pablo Galindo
- gh-125593: Use color to highlight error locations in
traceback from exception group
- gh-125444: Fix illegal instruction for older Arm
architectures. Patch by Diego Russo, testing by Ross
Burton.
- gh-124375: Fix a crash in the free threading build when the
GC runs concurrently with a new thread starting.
- gh-125221: Fix possible race condition when calling
__reduce_ex__() for the first time in the free threading
build.
- gh-125038: Fix crash when iterating over a generator
expression after direct changes on gi_frame.f_locals. Patch
by Mikhail Efimov.
- gh-123378: Fix a crash in the __str__() method of
UnicodeError objects when the UnicodeError.start and
UnicodeError.end values are invalid or out-of-range. Patch
by Bénédikt Tran.
- gh-116510: Fix a crash caused by immortal interned strings
being shared between sub-interpreters that use basic
single-phase init. In that case, the string can be used
by an interpreter that outlives the interpreter that
created and interned it. For interpreters that share
obmalloc state, also share the interned dict with the main
interpreter.
- gh-122878: Use the pager binary, if available (e.g. on
Debian and derivatives), to display REPL help().
- gh-124188: Fix reading and decoding a line from the source
file witn non-UTF-8 encoding for syntax errors raised in
the compiler.
- gh-123930: Improve the error message when a script
shadowing a module from the standard library causes
ImportError to be raised during a “from” import. Similarly,
improve the error message when a script shadowing a third
party module attempts to “from” import an attribute from
that third party module while still initialising.
- gh-122907: Building with HAVE_DYNAMIC_LOADING
now works as well as it did in 3.12. Existing
deficiences will be addressed separately. (See
https://github.com/python/cpython/issues/122950.)
- gh-118950: Fix bug where SSLProtocol.connection_lost wasn’t
getting called when OSError was thrown on writing to
socket.
- gh-113570: Fixed a bug in reprlib.repr where it incorrectly
called the repr method on shadowed Python built-in types.
- gh-109746: If _thread.start_new_thread() fails to start a
new thread, it deletes its state from interpreter and thus
avoids its repeated cleanup on finalization.
- C API
- gh-126554: Fix error handling in ctypes.CDLL objects which
could result in a crash in rare situations.
- gh-125608: Fix a bug where dictionary watchers
(e.g., PyDict_Watch()) on an object’s attribute dictionary
(__dict__) were not triggered when the object’s attributes
were modified.
- bpo-34008: Added Py_IsInitialized to the list of APIs that
are safe to call before the interpreter is initialized, and
updated the embedding tests to cover it.
- Build
- gh-123877: Set wasm32-wasip1 as the WASI target. The old
wasm32-wasi target is deprecated so it can be used for an
eventual WASI 1.0.
- gh-89640: Hard-code float word ordering as little endian on
WASM.
- gh-125940: The Android build now supports 16 KB page sizes.
- gh-89640: Improve detection of float word ordering on Linux
when link-time optimizations are enabled.
- gh-125269: Fix detection of whether -latomic is needed when
cross-compiling CPython using the configure script.
- gh-121634: Allow for specifying the target compile triple
for WASI.
- gh-122578: Use WASI SDK 24 for testing.
- gh-115382: Fix cross compile failures when the host and
target SOABIs match.
- Skip PGO with %want_reproducible_builds (bsc#1239210).
- Configure externally_managed with a bcond https://en.opensuse.org/openSUSE:Python:Externally_managed (bsc#1228165).
Patchnames
SUSE-2025-2074,SUSE-SLE-Module-Python3-15-SP7-2025-2074
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for python313", "title": "Title of the patch" }, { "category": "description", "text": "This update for python313 fixes the following issues:\n\nUpdate to version 3.13.5.\n\nSecurity issues fixed:\n\n- CVE-2025-4517: arbitrary filesystem writes outside the extraction directory during extraction with filter=\u0027data\u0027 (bsc#1244032)\n- CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273).\n- CVE-2025-4330: extraction filter bypass for linking outside extraction directory (bsc#1244060)\n- CVE-2025-4138: may allow symlink targets to point outside the destination directory, and the modification of some file metadata.\n (bsc#1244059)\n- CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse (bsc#1236705).\n- CVE-2024-12718: bypass extraction filter to modify file metadata outside extraction directory (bsc#1244056)\n- CVE-2024-12254: memory exhaustion due to unbounded memory buffering in `SelectorSocketTransport.writelines()`\n (bsc#1234290).\n\n\nOther changes and issues fixed:\n \n \nChanges from 3.13.5:\n\n - Tests\n\n - gh-135120: Add test.support.subTests().\n\n - Library\n\n - gh-133967: Do not normalize locale name \u2018C.UTF-8\u2019 to\n \u2018en_US.UTF-8\u2019.\n - gh-135326: Restore support of integer-like objects with\n __index__() in random.getrandbits().\n - gh-135321: Raise a correct exception for values greater\n than 0x7fffffff for the BINSTRING opcode in the C\n implementation of pickle.\n - gh-135276: Backported bugfixes in zipfile.Path from\n zipp 3.23. Fixed .name, .stem and other basename-based\n properties on Windows when working with a zipfile on disk.\n - gh-134151: email: Fix TypeError in\n email.utils.decode_params() when sorting RFC 2231\n continuations that contain an unnumbered section.\n - gh-134152: email: Fix parsing of email message ID with\n invalid domain.\n - gh-127081: Fix libc thread safety issues with os by\n replacing getlogin with getlogin_r re-entrant version.\n - gh-131884: Fix formatting issues in json.dump() when both\n indent and skipkeys are used.\n - Core and Builtins\n - gh-135171: Roll back changes to generator and list\n comprehensions that went into 3.13.4 to fix gh-127682,\n but which involved semantic and bytecode changes not\n appropriate for a bugfix release.\n - C API\n - gh-134989: Fix Py_RETURN_NONE, Py_RETURN_TRUE and\n Py_RETURN_FALSE macros in the limited C API 3.11 and\n older: don\u2019t treat Py_None, Py_True and Py_False as\n immortal. Patch by Victor Stinner.\n - gh-134989: Implement PyObject_DelAttr() and\n PyObject_DelAttrString() as macros in the limited C API\n 3.12 and older. Patch by Victor Stinner.\n\nChanges from 3.13.4:\n\n - Security\n\n - gh-135034: Fixes multiple issues that allowed tarfile\n extraction filters (filter=\u0027data\u0027 and filter=\u0027tar\u0027) to be\n bypassed using crafted symlinks and hard links.\n Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138\n (bsc#1244059), CVE-2025-4330 (bsc#1244060), and\n CVE-2025-4517 (bsc#1244032).\n - gh-133767: Fix use-after-free in the \u201cunicode-escape\u201d\n decoder with a non-\u201cstrict\u201d error handler (CVE-2025-4516,\n bsc#1243273).\n - gh-128840: Short-circuit the processing of long IPv6\n addresses early in ipaddress to prevent excessive memory\n consumption and a minor denial-of-service.\n - Library\n - gh-134718: ast.dump() now only omits None and [] values if\n they are default values.\n - gh-128840: Fix parsing long IPv6 addresses with embedded\n IPv4 address.\n - gh-134696: Built-in HACL* and OpenSSL implementations of\n hash function constructors now correctly accept the same\n documented named arguments. For instance, md5() could be\n previously invoked as md5(data=data) or md5(string=string)\n depending on the underlying implementation but these calls\n were not compatible. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-134210: curses.window.getch() now correctly handles\n signals. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-80334: multiprocessing.freeze_support() now checks for\n work on any \u201cspawn\u201d start method platform rather than only\n on Windows.\n - gh-114177: Fix asyncio to not close subprocess pipes which\n would otherwise error out when the event loop is already\n closed.\n - gh-134152: Fixed UnboundLocalError that could occur during\n email header parsing if an expected trailing delimiter is\n missing in some contexts.\n - gh-62184: Remove import of C implementation of io.FileIO\n from Python implementation which has its own implementation\n - gh-133982: Emit RuntimeWarning in the Python implementation\n of io when the file-like object is not closed explicitly in\n the presence of multiple I/O layers.\n - gh-133890: The tarfile module now handles\n UnicodeEncodeError in the same way as OSError when cannot\n extract a member.\n - gh-134097: Fix interaction of the new REPL and -X\n showrefcount command line option.\n - gh-133889: The generated directory listing page in\n http.server.SimpleHTTPRequestHandler now only shows the\n decoded path component of the requested URL, and not the\n query and fragment.\n - gh-134098: Fix handling paths that end with\n a percent-encoded slash (%2f or %2F) in\n http.server.SimpleHTTPRequestHandler.\n - gh-134062: ipaddress: fix collisions in __hash__() for\n IPv4Network and IPv6Network objects.\n - gh-133745: In 3.13.3 we accidentally changed the signature\n of the asyncio create_task() family of methods and how it\n calls a custom task factory in a backwards incompatible\n way. Since some 3rd party libraries have already made\n changes to work around the issue that might break if\n we simply reverted the changes, we\u2019re instead changing\n things to be backwards compatible with 3.13.2 while still\n supporting those workarounds for 3.13.3. In particular, the\n special-casing of name and context is back (until 3.14) and\n consequently eager tasks may still find that their name\n hasn\u2019t been set before they execute their first yielding\n await.\n - gh-71253: Raise ValueError in open() if opener returns a\n negative file-descriptor in the Python implementation of io\n to match the C implementation.\n - gh-77057: Fix handling of invalid markup declarations in\n html.parser.HTMLParser.\n - gh-133489: random.getrandbits() can now generate more that\n 231 bits. random.randbytes() can now generate more that 256\n MiB.\n - gh-133290: Fix attribute caching issue when setting\n ctypes._Pointer._type_ in the undocumented and deprecated\n ctypes.SetPointerType() function and the undocumented\n set_type() method.\n - gh-132876: ldexp() on Windows doesn\u2019t round subnormal\n results before Windows 11, but should. Python\u2019s\n math.ldexp() wrapper now does round them, so results may\n change slightly, in rare cases of very small results, on\n Windows versions before 11.\n - gh-133089: Use original timeout value for\n subprocess.TimeoutExpired when the func subprocess.run()\n is called with a timeout instead of sometimes a confusing\n partial remaining time out value used internally on the\n final wait().\n - gh-133009: xml.etree.ElementTree: Fix a crash in\n Element.__deepcopy__ when the element is concurrently\n mutated. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-132995: Bump the version of pip bundled in ensurepip to\n version 25.1.1\n - gh-132017: Fix error when pyrepl is suspended, then resumed\n and terminated.\n - gh-132673: Fix a crash when using _align_ = 0 and _fields_\n = [] in a ctypes.Structure.\n - gh-132527: Include the valid typecode \u2018w\u2019 in the error\n message when an invalid typecode is passed to array.array.\n - gh-132439: Fix PyREPL on Windows: characters entered via\n AltGr are swallowed. Patch by Chris Eibl.\n - gh-132429: Fix support of Bluetooth sockets on NetBSD and\n DragonFly BSD.\n - gh-132106: QueueListener.start now raises a RuntimeError if\n the listener is already started.\n - gh-132417: Fix a NULL pointer dereference when a C function\n called using ctypes with restype py_object returns NULL.\n - gh-132385: Fix instance error suggestions trigger potential\n exceptions in object.__getattr__() in traceback.\n - gh-132308: A traceback.TracebackException now correctly\n renders the __context__ and __cause__ attributes from\n falsey Exception, and the exceptions attribute from falsey\n ExceptionGroup.\n - gh-132250: Fixed the SystemError in cProfile when locating\n the actual C function of a method raises an exception.\n - gh-132063: Prevent exceptions that evaluate as\n falsey (namely, when their __bool__ method returns\n False or their __len__ method returns 0) from being\n ignored by concurrent.futures.ProcessPoolExecutor and\n concurrent.futures.ThreadPoolExecutor.\n - gh-119605: Respect follow_wrapped for __init__() and\n __new__() methods when getting the class signature for a\n class with inspect.signature(). Preserve class signature\n after wrapping with warnings.deprecated(). Patch by Xuehai\n Pan.\n - gh-91555: Ignore log messages generated during handling of\n log messages, to avoid deadlock or infinite recursion.\n - gh-131434: Improve error reporting for incorrect format in\n time.strptime().\n - gh-131127: Systems using LibreSSL now successfully build.\n - gh-130999: Avoid exiting the new REPL and offer suggestions\n even if there are non-string candidates when errors occur.\n - gh-130941: Fix configparser.ConfigParser parsing empty\n interpolation with allow_no_value set to True.\n - gh-129098: Fix REPL traceback reporting when using\n compile() with an inexisting file. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-130631: http.cookiejar.join_header_words() is now more\n similar to the original Perl version. It now quotes the\n same set of characters and always quote values that end\n with \u0027\\n\u0027.\n - gh-129719: Fix missing socket.CAN_RAW_ERR_FILTER constant\n in the socket module on Linux systems. It was missing since\n Python 3.11.\n - gh-124096: Turn on virtual terminal mode and enable\n bracketed paste in REPL on Windows console. (If the\n terminal does not support bracketed paste, enabling it does\n nothing.)\n - gh-122559: Remove __reduce__() and __reduce_ex__() methods\n that always raise TypeError in the C implementation\n of io.FileIO, io.BufferedReader, io.BufferedWriter\n and io.BufferedRandom and replace them with default\n __getstate__() methods that raise TypeError. This restores\n fine details of behavior of Python 3.11 and older versions.\n - gh-122179: hashlib.file_digest() now raises BlockingIOError\n when no data is available during non-blocking I/O. Before,\n it added spurious null bytes to the digest.\n - gh-86155: html.parser.HTMLParser.close() no longer loses\n data when the \u003cscript\u003e tag is not closed. Patch by Waylan\n Limberg.\n - gh-69426: Fix html.parser.HTMLParser to not unescape\n character entities in attribute values if they are followed\n by an ASCII alphanumeric or an equals sign.\n - bpo-44172: Keep a reference to original curses windows in\n subwindows so that the original window does not get deleted\n before subwindows.\n - Tests\n - gh-133744: Fix multiprocessing interrupt test. Add an event\n to synchronize the parent process with the child process:\n wait until the child process starts sleeping. Patch by\n Victor Stinner.\n - gh-133639: Fix\n TestPyReplAutoindent.test_auto_indent_default() doesn\u2019t run\n input_code.\n - gh-133131: The iOS testbed will now select the most\n recently released \u201cSE-class\u201d device for testing if a device\n isn\u2019t explicitly specified.\n - gh-109981: The test helper that counts the list of open\n file descriptors now uses the optimised /dev/fd approach on\n all Apple platforms, not just macOS. This avoids crashes\n caused by guarded file descriptors.\n - IDLE\n - gh-112936: fix IDLE: no Shell menu item in single-process\n mode.\n - Documentation\n - gh-107006: Move documentation and example code for\n threading.local from its docstring to the official docs.\n - Core and Builtins\n - gh-134908: Fix crash when iterating over lines in a text\n file on the free threaded build.\n - gh-127682: No longer call __iter__ twice in list\n comprehensions. This brings the behavior of list\n comprehensions in line with other forms of iteration\n - gh-134381: Fix RuntimeError when using a not-started\n threading.Thread after calling os.fork()\n - gh-128066: Fixes an edge case where PyREPL improperly threw\n an error when Python is invoked on a read only filesystem\n while trying to write history file entries.\n - gh-134100: Fix a use-after-free bug that occurs when an\n imported module isn\u2019t in sys.modules after its initial\n import. Patch by Nico-Posada.\n - gh-133703: Fix hashtable in dict can be bigger than\n intended in some situations.\n - gh-132869: Fix crash in the free threading build when\n accessing an object attribute that may be concurrently\n inserted or deleted.\n - gh-132762: fromkeys() no longer loops forever when adding\n a small set of keys to a large base dict. Patch by Angela\n Liss.\n - gh-133543: Fix a possible memory leak that could occur when\n directly accessing instance dictionaries (__dict__) that\n later become part of a reference cycle.\n - gh-133516: Raise ValueError when constants True, False or\n None are used as an identifier after NFKC normalization.\n - gh-133441: Fix crash upon setting an attribute with a dict\n subclass. Patch by Victor Stinner.\n - gh-132942: Fix two races in the type lookup cache. This\n affected the free-threaded build and could cause crashes\n (apparently quite difficult to trigger).\n - gh-132713: Fix repr(list) race condition: hold a strong\n reference to the item while calling repr(item). Patch by\n Victor Stinner.\n - gh-132747: Fix a crash when calling __get__() of a method\n with a None second argument.\n - gh-132542: Update Thread.native_id after fork(2) to ensure\n accuracy. Patch by Noam Cohen.\n - gh-124476: Fix decoding from the locale encoding in the\n C.UTF-8 locale.\n - gh-131927: Compiler warnings originating from the same\n module and line number are now only emitted once, matching\n the behaviour of warnings emitted from user code. This can\n also be configured with warnings filters.\n - gh-127682: No longer call __iter__ twice when creating and\n executing a generator expression. Creating a generator\n expression from a non-interable will raise only when the\n generator expression is executed. This brings the behavior\n of generator expressions in line with other generators.\n - gh-131878: Handle uncaught exceptions in the main input\n loop for the new REPL.\n - gh-131878: Fix support of unicode characters with two or\n more codepoints on Windows in the new REPL.\n - gh-130804: Fix support of unicode characters on Windows in\n the new REPL.\n - gh-130070: Fixed an assertion error for exec() passed a\n string source and a non-None closure. Patch by Bartosz\n S\u0142awecki.\n - gh-129958: Fix a bug that was allowing newlines\n inconsitently in format specifiers for single-quoted\n f-strings. Patch by Pablo Galindo.\n - C API\n - gh-132909: Fix an overflow when handling the K format in\n Py_BuildValue(). Patch by B\u00e9n\u00e9dikt Tran.\n\n- Changes from version 3.13.3\n\n - Tools/Demos\n - gh-131852: msgfmt no longer adds the POT-Creation-Date to\n generated .mo files for consistency with GNU msgfmt.\n - gh-85012: Correctly reset msgctxt when compiling messages\n in msgfmt.\n - gh-130025: The iOS testbed now correctly handles symlinks\n used as Python framework references.\n - Tests\n - gh-131050: test_ssl.test_dh_params is skipped if the\n underlying TLS library does not support finite-field\n ephemeral Diffie-Hellman.\n - gh-129200: Multiple iOS testbed runners can now be started\n at the same time without introducing an ambiguity over\n simulator ownership.\n - gh-130292: The iOS testbed will now run successfully on a\n machine that has not previously run Xcode tests (such as CI\n configurations).\n - gh-130293: The tests of terminal colorization are no longer\n sensitive to the value of the TERM variable in the testing\n environment.\n - gh-126332: Add unit tests for pyrepl.\n - Security\n - gh-131809: Update bundled libexpat to 2.7.1\n - gh-131261: Upgrade to libexpat 2.7.0\n - gh-127371: Avoid unbounded buffering for\n tempfile.SpooledTemporaryFile.writelines(). Previously,\n disk spillover was only checked after the lines iterator\n had been exhausted. This is now done after each line is\n written.\n - gh-121284: Fix bug in the folding of rfc2047 encoded-words\n when flattening an email message using a modern email\n policy. Previously when an encoded-word was too long for\n a line, it would be decoded, split across lines, and\n re-encoded. But commas and other special characters in the\n original text could be left unencoded and unquoted. This\n could theoretically be used to spoof header lines using\n a carefully constructed encoded-word if the resulting\n rendered email was transmitted or re-parsed.\n - Library\n - gh-132174: Fix function name in error message of\n _interpreters.run_string.\n - gh-132171: Fix crash of _interpreters.run_string on string\n subclasses.\n - gh-129204: Introduce new _PYTHON_SUBPROCESS_USE_POSIX_SPAWN\n environment variable knob in subprocess to control the use\n of os.posix_spawn().\n - gh-132159: Do not shadow user arguments in generated\n __new__() by decorator warnings.deprecated. Patch by Xuehai\n Pan.\n - gh-132075: Fix possible use of socket address structures\n with uninitialized members. Now all structure members are\n initialized with zeroes by default.\n - gh-132002: Fix crash when deallocating\n contextvars.ContextVar with weird unahashable string names.\n - gh-131668: socket: Fix code parsing AF_BLUETOOTH socket\n addresses.\n - gh-131492: Fix a resource leak when constructing a\n gzip.GzipFile with a filename fails, for example when\n passing an invalid compresslevel.\n - gh-131325: Fix sendfile fallback implementation to drain\n data after writing to transport in asyncio.\n - gh-129843: Fix incorrect argument passing in\n warnings.warn_explicit().\n - gh-131204: Use monospace font from System Font Stack for\n cross-platform support in difflib.HtmlDiff.\n - gh-130940: The PyConfig.use_system_logger attribute,\n introduced in Python 3.13.2, has been removed. The\n introduction of this attribute inadvertently introduced an\n ABI breakage on macOS and iOS. The use of the system logger\n is now enabled by default on iOS, and disabled by default\n on macOS.\n - gh-131045: Fix issue with __contains__, values, and\n pseudo-members for enum.Flag.\n - gh-130959: Fix pure-Python implementation of\n datetime.time.fromisoformat() to reject times with spaces\n in fractional part (for example, 12:34:56.400 +02:00),\n matching the C implementation. Patch by Micha\u0142 Gorny.\n - gh-130637: Add validation for numeric response data in\n poplib.POP3.stat() method\n - gh-130461: Remove .. index:: directives from the uuid\n module documentation. These directives previously created\n entries in the general index for getnode() as well as\n the uuid1(), uuid3(), uuid4(), and uuid5() constructor\n functions.\n - gh-130379: The zipapp module now calculates the list of\n files to be added to the archive before creating the\n archive. This avoids accidentally including the target when\n it is being created in the source directory.\n - gh-130285: Fix corner case for random.sample() allowing the\n counts parameter to specify an empty population. So now,\n sample([], 0, counts=[]) and sample(\u0027abc\u0027, k=0, counts=[0,\n 0, 0]) both give the same result as sample([], 0).\n - gh-130250: Fix regression in traceback.print_last().\n - gh-130230: Fix crash in pow() with only Decimal third\n argument.\n - gh-118761: Reverts a change in the previous release\n attempting to make some stdlib imports used within the\n subprocess module lazy as this was causing errors during\n __del__ finalizers calling methods such as terminate, or\n kill, or send_signal.\n - gh-130164: Fixed failure to raise TypeError in\n inspect.Signature.bind() for positional-only arguments\n provided by keyword when a variadic keyword argument (e.g.\n --kwargs) is present.\n - gh-130151: Fix reference leaks in _hashlib.hmac_new() and\n _hashlib.hmac_digest(). Patch by B\u00e9n\u00e9dikt Tran.\n - gh-130145: Fix asyncio.AbstractEventloop.run_forever() when\n another loop is already running.\n - gh-129726: Fix gzip.GzipFile raising an unraisable\n exception during garbage collection when referring to\n a temporary object by breaking the reference loop with\n weakref.\n - gh-127750: Remove broken functools.singledispatchmethod()\n caching introduced in gh-85160.\n - gh-129583: Update bundled pip to 25.0.1\n - gh-97850: Update the deprecation warning of\n importlib.abc.Loader.load_module().\n - gh-129646: Update the locale alias mapping in the locale\n module to match the latest X Org locale alias mapping and\n support new locales in Glibc 2.41.\n - gh-129603: Fix bugs where sqlite3.Row objects could\n segfault if their inherited description was set to\n None. Patch by Erlend Aasland.\n - gh-128231: Execution of multiple statements in the new\n REPL now stops immediately upon the first exception\n encountered. Patch by Bartosz S\u0142awecki.\n - gh-117779: Fix reading duplicated entries in zipfile by\n name. Reading duplicated entries (except the last one)\n by ZipInfo now emits a warning instead of raising an\n exception.\n - gh-128772: Fix pydoc for methods with the __module__\n attribute equal to None.\n - gh-92897: Scheduled the deprecation of the check_home\n argument of sysconfig.is_python_build() to Python 3.15.\n - gh-128657: Fix possible extra reference when using objects\n returned by hashlib.sha256() under free threading.\n - gh-128703: Fix mimetypes.guess_type() to use default\n mapping for empty Content-Type in registry.\n - gh-128308: Support the name keyword argument\n for eager tasks in asyncio.loop.create_task(),\n asyncio.create_task() and asyncio.TaskGroup.create_task(),\n by passing on all kwargs to the task factory set by\n asyncio.loop.set_task_factory().\n - gh-128388: Fix PyREPL on Windows to support more\n keybindings, like the Control-\u2190 and Control-\u2192 word-skipping\n keybindings and those with meta (i.e. Alt), e.g. Alt-d to\n kill-word or Alt-Backspace backward-kill-word.\n - gh-126037: xml.etree.ElementTree: Fix a crash in\n Element.find, Element.findtext and Element.findall when\n the tag to find implements an __eq__() method mutating the\n element being queried. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-127712: Fix handling of the secure argument of\n logging.handlers.SMTPHandler.\n - gh-126033: xml.etree.ElementTree: Fix a crash in\n Element.remove when the element is concurrently\n mutated. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-118201: Fixed intermittent failures of os.confstr,\n os.pathconf and os.sysconf on iOS and Android.\n - gh-124927: Non-printing characters are now properly handled\n in the new REPL.\n - IDLE\n - gh-129873: Simplify displaying the IDLE doc by only copying\n the text section of idle.html to idlelib/help.html. Patch\n by Stan Ulbrych.\n - Documentation\n - gh-131417: Mention asyncio.Future and asyncio.Task in\n generic classes list.\n - gh-125722: Require Sphinx 8.2.0 or later to build the\n Python documentation. Patch by Adam Turner.\n - gh-129712: The wheel tags supported by each macOS universal\n SDK option are now documented.\n - gh-46236: C API: Document PyUnicode_RSplit(),\n PyUnicode_Partition() and PyUnicode_RPartition().\n - Core and Builtins\n - gh-132011: Fix crash when calling list.append() as an\n unbound method.\n - gh-131998: Fix a crash when using an unbound method\n descriptor object in a function where a bound method\n descriptor was used.\n - gh-131988: Fix a performance regression that caused scaling\n bottlenecks in the free threaded build in 3.13.1 and\n 3.13.2.\n - gh-131719: Fix missing NULL check in _PyMem_FreeDelayed in\n free-threaded build.\n - gh-131670: Fix anext() failing on sync __anext__() raising\n an exception.\n - gh-131141: Fix data race in sys.monitoring instrumentation\n while registering callback.\n - gh-130932: Fix incorrect exception handling in\n _PyModule_IsPossiblyShadowing\n - gh-130851: Fix a crash in the free threading build when\n constructing a code object with co_consts that contains\n instances of types that are not otherwise generated by the\n bytecode compiler.\n - gh-130794: Fix memory leak in the free threaded build\n when resizing a shared list or dictionary from multiple\n short-lived threads.\n - gh-130775: Do not crash on negative column and end_column\n in ast locations.\n - gh-130382: Fix PyRefTracer_DESTROY not being sent from\n Python/ceval.c Py_DECREF().\n - gh-130618: Fix a bug that was causing UnicodeDecodeError or\n SystemError to be raised when using f-strings with lambda\n expressions with non-ASCII characters. Patch by Pablo\n Galindo\n - gh-130163: Fix possible crashes related to concurrent\n change and use of the sys module attributes.\n - gh-88887: Fixing multiprocessing Resource Tracker process\n leaking, usually observed when running Python as PID 1.\n - gh-130115: Fix an issue with thread identifiers being\n sign-extended on some platforms.\n - gh-128396: Fix a crash that occurs when calling locals()\n inside an inline comprehension that uses the same local\n variable as the outer frame scope where the variable is a\n free or cell var.\n - gh-116042: Fix location for SyntaxErrors of invalid escapes\n in the tokenizer. Patch by Pablo Galindo\n - gh-129983: Fix data race in compile_template in sre.c.\n - gh-129967: Fix a race condition in the free threading build\n when repr(set) is called concurrently with set.clear().\n - gh-129900: Fix return codes inside SystemExit not getting\n returned by the REPL.\n - gh-129732: Fixed a race in _Py_qsbr_reserve in the free\n threading build.\n - gh-129643: Fix thread safety of PyList_Insert() in\n free-threading builds.\n - gh-129668: Fix race condition when raising MemoryError in\n the free threaded build.\n - gh-129643: Fix thread safety of PyList_SetItem() in\n free-threading builds. Patch by Kumar Aditya.\n - gh-128714: Fix the potential races in get/set dunder\n methods __annotations__, __annotate__ and __type_params__\n for function object, and add related tests.\n - gh-128632: Disallow __classdict__ as the name of a type\n parameter. Using this name would previously crash the\n interpreter in some circumstances.\n - gh-127953: The time to handle a LINE event in\n sys.monitoring (and sys.settrace) is now independent of the\n number of lines in the code object.\n - gh-125331: from __future__ import barry_as_FLUFL now works\n in more contexts, including when it is used in files,\n with the -c flag, and in the REPL when there are multiple\n statements on the same line. Previously, it worked only\n on subsequent lines in the REPL, and when the appropriate\n flags were passed directly to compile(). Patch by Pablo\n Galindo.\n - C API\n - gh-131740: Update PyUnstable_GC_VisitObjects to traverse\n perm gen.\n - gh-129533: Update PyGC_Enable(), PyGC_Disable(),\n PyGC_IsEnabled() to use atomic operation for thread-safety\n at free-threading build. Patch by Donghee Na.\n - Build\n - gh-131865: The DTrace build now properly passes the CC\n and CFLAGS variables to the dtrace command when utilizing\n SystemTap on Linux.\n - gh-131675: Fix mimalloc library builds for 32-bit ARM\n targets.\n - gh-130673: Fix potential KeyError when handling object\n sections during JIT building process.\n - gh-130740: Ensure that Python.h is included before\n stdbool.h unless pyconfig.h is included before or in some\n platform-specific contexts.\n - gh-129838: Don\u2019t redefine _Py_NO_SANITIZE_UNDEFINED when\n compiling with a recent GCC version and undefined sanitizer\n enabled.\n - gh-129660: Drop test_embed from PGO training, whose\n contribution in recent versions is considered to be\n ignorable.\n\n- Changes from version 3.13.2:\n \n - Tools/Demos\n - gh-128152: Fix a bug where Argument Clinic\u2019s C\n pre-processor parser tried to parse pre-processor\n directives inside C comments. Patch by Erlend Aasland.\n - Tests\n - gh-127906: Test the limited C API in test_cppext. Patch by\n Victor Stinner.\n - gh-127637: Add tests for the dis command-line\n interface. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-126925: iOS test results are now streamed during test\n execution, and the deprecated xcresulttool is no longer\n used.\n - Security\n - gh-105704: When using urllib.parse.urlsplit() and\n urllib.parse.urlparse() host parsing would not reject\n domain names containing square brackets ([ and ]). Square\n brackets are only valid for IPv6 and IPvFuture hosts\n according to RFC 3986 Section 3.2.2. (CVE-2025-0938,\n bsc#1236705)\n - gh-127655: Fixed the\n asyncio.selector_events._SelectorSocketTransport\n transport not pausing writes for the protocol when\n the buffer reaches the high water mark when using\n asyncio.WriteTransport.writelines() (CVE-2024-12254,\n bsc#1234290).\n - gh-126108: Fix a possible NULL pointer dereference in\n PySys_AddWarnOptionUnicode().\n - gh-80222: Fix bug in the folding of quoted strings\n when flattening an email message using a modern email\n policy. Previously when a quoted string was folded so\n that it spanned more than one line, the surrounding\n quotes and internal escapes would be omitted. This could\n theoretically be used to spoof header lines using a\n carefully constructed quoted string if the resulting\n rendered email was transmitted or re-parsed.\n - gh-119511: Fix a potential denial of service in the imaplib\n module. When connecting to a malicious server, it could\n cause an arbitrary amount of memory to be allocated. On\n many systems this is harmless as unused virtual memory is\n only a mapping, but if this hit a virtual address size\n limit it could lead to a MemoryError or other process\n crash. On unusual systems or builds where all allocated\n memory is touched and backed by actual ram or storage\n it could\u2019ve consumed resources doing so until similarly\n crashing.\n - Library\n - gh-129502: Unlikely errors in preparing arguments for\n ctypes callback are now handled in the same way as errors\n raised in the callback of in converting the result of\n the callback \u2013 using sys.unraisablehook() instead of\n sys.excepthook() and not setting sys.last_exc and other\n variables.\n - gh-129403: Corrected ValueError message for asyncio.Barrier\n and threading.Barrier.\n - gh-129409: Fix an integer overflow in the csv module when\n writing a data field larger than 2GB.\n - gh-118761: Improve import time of subprocess by lazy\n importing locale and signal. Patch by Taneli Hukkinen.\n - gh-129346: In sqlite3, handle out-of-memory when creating\n user-defined SQL functions.\n - gh-129061: Fix FORCE_COLOR and NO_COLOR when empty\n strings. Patch by Hugo van Kemenade.\n - gh-128550: Removed an incorrect optimization relating\n to eager tasks in asyncio.TaskGroup that resulted in\n cancellations being missed.\n - gh-128991: Release the enter frame reference within bdb\n callback\n - gh-128978: Fix a NameError in\n sysconfig.expand_makefile_vars(). Patch by B\u00e9n\u00e9dikt Tran.\n - gh-128961: Fix a crash when setting state on an exhausted\n array.array iterator.\n - gh-128894: Fix\n traceback.TracebackException._format_syntax_error not to\n fail on exceptions with custom metadata.\n - gh-128916: Do not attempt to set SO_REUSEPORT on sockets of\n address families other than AF_INET and AF_INET6, as it is\n meaningless with these address families, and the call with\n fail with Linux kernel 6.12.9 and newer.\n - gh-128679: Fix tracemalloc.stop() race condition. Fix\n tracemalloc to support calling tracemalloc.stop() in\n one thread, while another thread is tracing memory\n allocations. Patch by Victor Stinner.\n - gh-128636: Fix PyREPL failure when os.environ is\n overwritten with an invalid value.\n - gh-128562: Fix possible conflicts in generated tkinter\n widget names if the widget class name ends with a digit.\n - gh-128498: Default to stdout isatty for color detection\n instead of stderr. Patch by Hugo van Kemenade.\n - gh-128552: Fix cyclic garbage introduced\n by asyncio.loop.create_task() and\n asyncio.TaskGroup.create_task() holding a reference to the\n created task if it is eager.\n - gh-128479: Fix asyncio.staggered.staggered_race() leaking\n tasks and issuing an unhandled exception.\n - gh-128400: Fix crash when using\n faulthandler.dump_traceback() while other threads are\n active on the free threaded build.\n - gh-88834: Unify the instance check for typing.Union and\n types.UnionType: Union now uses the instance checks against\n its parameters instead of the subclass checks.\n - gh-128302: Fix\n xml.dom.xmlbuilder.DOMEntityResolver.resolveEntity(), which\n was broken by the Python 3.0 transition.\n - gh-128302: Allow xml.dom.xmlbuilder.DOMParser.parse()\n to correctly handle xml.dom.xmlbuilder.DOMInputSource\n instances that only have a systemId attribute set.\n - gh-112064: Fix incorrect handling of negative read sizes in\n HTTPResponse.read. Patch by Yury Manushkin.\n - gh-58956: Fixed a frame reference leak in bdb.\n - gh-128131: Completely support random access of uncompressed\n unencrypted read-only zip files obtained by ZipFile.open.\n - gh-112328: enum.EnumDict can now be used without resorting\n to private API.\n - gh-127975: Avoid reusing quote types in ast.unparse() if\n not needed.\n - gh-128062: Revert the font of turtledemo\u2019s menu bar to its\n default value and display the shortcut keys in the correct\n position.\n - gh-128014: Fix resetting the default window icon by passing\n default=\u0027\u0027 to the tkinter method wm_iconbitmap().\n - gh-115514: Fix exceptions and incomplete writes after\n asyncio._SelectorTransport is closed before writes are\n completed.\n - gh-41872: Fix quick extraction of module docstrings from\n a file in pydoc. It now supports docstrings with single\n quotes, escape sequences, raw string literals, and other\n Python syntax.\n - gh-127060: Set TERM environment variable to \u201cdumb\u201d to\n disable traceback colors in IDLE, since IDLE doesn\u2019t\n understand ANSI escape sequences. Patch by Victor Stinner.\n - gh-126742: Fix support of localized error messages reported\n by dlerror(3) and gdbm_strerror in ctypes and dbm.gnu\n functions respectively. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-127873: When -E is set, only ignore PYTHON_COLORS\n and not FORCE_COLOR/NO_COLOR/TERM when colourising\n output. Patch by Hugo van Kemenade.\n - gh-127870: Detect recursive calls in ctypes _as_parameter_\n handling. Patch by Victor Stinner.\n - gh-127847: Fix the position when doing interleaved seeks\n and reads in uncompressed, unencrypted zip files returned\n by zipfile.ZipFile.open().\n - gh-127732: The platform module now correctly detects\n Windows Server 2025.\n - gh-126821: macOS and iOS apps can now choose to redirect\n stdout and stderr to the system log during interpreter\n configuration.\n - gh-93312: Include \u003csys/pidfd.h\u003e to get os.PIDFD_NONBLOCK\n constant. Patch by Victor Stinner.\n - gh-83662: Add missing __class_getitem__ method to the\n Python implementation of functools.partial(), to make it\n compatible with the C version. This is mainly relevant for\n alternative Python implementations like PyPy and GraalPy,\n because CPython will usually use the C-implementation of\n that function.\n - gh-127586: multiprocessing.pool.Pool now properly restores\n blocked signal handlers of the parent thread when creating\n processes via either spawn or forkserver.\n - gh-98188: Fix an issue in\n email.message.Message.get_payload() where data cannot be\n decoded if the Content Transfer Encoding mechanism contains\n trailing whitespaces or additional junk text. Patch by Hui\n Liu.\n - gh-127257: In ssl, system call failures that OpenSSL\n reports using ERR_LIB_SYS are now raised as OSError.\n - gh-127096: Do not recreate unnamed section on every read in\n configparser.ConfigParser. Patch by Andrey Efremov.\n - gh-127196: Fix crash when dict with keys in invalid\n encoding were passed to several functions in _interpreters\n module.\n - gh-126775: Make linecache.checkcache() thread safe and GC\n re-entrancy safe.\n - gh-126332: Fix _pyrepl crash when entering a double CTRL-Z\n on an overflowing line.\n - gh-126225: getopt and optparse are no longer marked as\n deprecated. There are legitimate reasons to use one of\n these modules in preference to argparse, and none of these\n modules are at risk of being removed from the standard\n library. Of the three, argparse remains the recommended\n default choice, unless one of the concerns noted at the top\n of the optparse module documentation applies.\n - gh-125553: Fix round-trip invariance for backslash\n continuations in tokenize.untokenize().\n - gh-123987: Fixed issue in NamespaceReader where a non-path\n item in a namespace path, such as a sentinel added by an\n editable installer, would break resource loading.\n - gh-123401: The http.cookies module now supports parsing\n obsolete RFC 850 date formats, in accordance with RFC 9110\n requirements. Patch by Nano Zheng.\n - gh-122431: readline.append_history_file() now raises a\n ValueError when given a negative value.\n - gh-119257: Show tab completions menu below the current\n line, which results in less janky behaviour, and fixes a\n cursor movement bug. Patch by Daniel Hollas\n - Documentation\n - gh-125722: Require Sphinx 8.1.3 or later to build the\n Python documentation. Patch by Adam Turner.\n - gh-67206: Document that string.printable is not\n printable in the POSIX sense. In particular,\n string.printable.isprintable() returns False. Patch by\n B\u00e9n\u00e9dikt Tran.\n - Core and Builtins\n - gh-129345: Fix null pointer dereference in syslog.openlog()\n when an audit hook raises an exception.\n - gh-129093: Fix f-strings such as f\u0027{expr=}\u0027 sometimes not\n displaying the full expression when the expression contains\n !=.\n - gh-124363: Treat debug expressions in f-string as raw\n strings. Patch by Pablo Galindo\n - gh-128799: Add frame of except* to traceback when it wraps\n a naked exception.\n - gh-128078: Fix a SystemError when using anext() with a\n default tuple value. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-128717: Fix a crash when setting the recursion limit\n while other threads are active on the free threaded build.\n - gh-128330: Restore terminal control characters on REPL\n exit.\n - gh-128079: Fix a bug where except* does not properly check\n the return value of an ExceptionGroup\u2019s split() function,\n leading to a crash in some cases. Now when split() returns\n an invalid object, except* raises a TypeError with the\n original raised ExceptionGroup object chained to it.\n - gh-128030: Avoid error from calling\n PyModule_GetFilenameObject on a non-module object when\n importing a non-existent symbol from a non-module object.\n - gh-127903: Objects/unicodeobject.c: fix a crash on DEBUG\n builds in _copy_characters when there is nothing to copy.\n - gh-127599: Fix statistics for increments of object\n reference counts (in particular, when a reference count was\n increased by more than 1 in a single operation).\n - gh-127651: When raising ImportError for missing symbols\n in from imports, use __file__ in the error message if\n __spec__.origin is not a location\n - gh-127582: Fix non-thread-safe object resurrection when\n calling finalizers and watcher callbacks in the free\n threading build.\n - gh-127434: The iOS compiler shims can now accept arguments\n with spaces.\n - gh-127536: Add missing locks around some list assignment\n operations in the free threading build.\n - gh-126862: Fix a possible overflow when a class inherits\n from an absurd number of super-classes. Reported by Valery\n Fedorenko. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-127349: Fixed the error when resizing terminal in Python\n REPL. Patch by Semyon Moroz.\n - gh-126076: Relocated objects such as tuple, bytes and\n str objects are properly tracked by tracemalloc and its\n associated hooks. Patch by Pablo Galindo.\n - C API\n - gh-127791: Fix loss of callbacks after more than one call\n to PyUnstable_AtExit().\n - Build\n - gh-129539: Don\u2019t redefine EX_OK when the system has the\n sysexits.h header.\n - gh-128472: Skip BOLT optimization of functions using\n computed gotos, fixing errors on build with LLVM 19.\n - gh-123925: Fix building the curses module on platforms with\n libncurses but without libncursesw.\n - gh-128321: Set LIBS instead of LDFLAGS when checking if\n sqlite3 library functions are available. This fixes the\n ordering of linked libraries during checks, which was\n incorrect when using a statically linked libsqlite3.\n - gh-127865: Fix build failure on systems without\n thread-locals support.\n\n- Changes from version 3.13.1:\n - Tools/Demos\n - gh-126807: Fix extraction warnings in pygettext.py caused\n by mistaking function definitions for function calls.\n - gh-126167: The iOS testbed was modified so that it can be\n used by third-party projects for testing purposes.\n - Tests\n - gh-126909: Fix test_os extended attribute tests to work on\n filesystems with 1 KiB xattr size limit.\n - gh-125041: Re-enable skipped tests for zlib on the\n s390x architecture: only skip checks of the compressed\n bytes, which can be different between zlib\u2019s software\n implementation and the hardware-accelerated implementation.\n - gh-124295: Add translation tests to the argparse module.\n - Security\n - gh-126623: Upgrade libexpat to 2.6.4\n - gh-125140: Remove the current directory from sys.path when\n using PyREPL.\n - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to\n consistently use the mapped IPv4 address value for deciding\n properties. Properties which have their behavior fixed are\n is_multicast, is_reserved, is_link_local, is_global, and\n is_unspecified.\n - Library\n - gh-127321: pdb.set_trace() will not stop at an opcode that\n does not have an associated line number anymore.\n - gh-127303: Publicly expose EXACT_TOKEN_TYPES in\n token.__all__.\n - gh-123967: Fix faulthandler for trampoline frames. If the\n top-most frame is a trampoline frame, skip it. Patch by\n Victor Stinner.\n - gh-127182: Fix io.StringIO.__setstate__() crash, when None\n was passed as the first value.\n - gh-127217: Fix urllib.request.pathname2url() for paths\n starting with multiple slashes on Posix.\n - gh-127035: Fix shutil.which on Windows. Now it looks at\n direct match if and only if the command ends with a PATHEXT\n extension or X_OK is not in mode. Support extensionless\n files if \u201c.\u201d is in PATHEXT. Support PATHEXT extensions that\n end with a dot.\n - gh-122273: Support PyREPL history on Windows. Patch by\n devdanzin and Victor Stinner.\n - gh-127078: Fix issue where urllib.request.url2pathname()\n failed to discard an extra slash before a UNC drive in the\n URL path on Windows.\n - gh-126766: Fix issue where urllib.request.url2pathname()\n failed to discard any \u2018localhost\u2019 authority present in the\n URL.\n - gh-127065: Fix crash when calling a operator.methodcaller()\n instance from multiple threads in the free threading build.\n - gh-126997: Fix support of STRING and GLOBAL opcodes with\n non-ASCII arguments in pickletools. pickletools.dis()\n now outputs non-ASCII bytes in STRING, BINSTRING and\n SHORT_BINSTRING arguments as escaped (\\xXX).\n - gh-126316: grp: Make grp.getgrall() thread-safe by adding a\n mutex. Patch by Victor Stinner.\n - gh-126618: Fix the representation of itertools.count\n objects when the count value is sys.maxsize.\n - gh-85168: Fix issue where urllib.request.url2pathname() and\n pathname2url() always used UTF-8 when quoting and unquoting\n file URIs. They now use the filesystem encoding and error\n handler.\n - gh-67877: Fix memory leaks when regular expression matching\n terminates abruptly, either because of a signal or because\n memory allocation fails.\n - gh-126789: Fixed the values of sysconfig.get_config_vars(),\n sysconfig.get_paths(), and their siblings when the site\n initialization happens after sysconfig has built a cache\n for sysconfig.get_config_vars().\n - gh-126188: Update bundled pip to 24.3.1\n - gh-126780: Fix os.path.normpath() for drive-relative paths\n on Windows.\n - gh-126766: Fix issue where urllib.request.url2pathname()\n failed to discard two leading slashes introducing an empty\n authority section.\n - gh-126727: locale.nl_langinfo(locale.ERA) now returns\n multiple era description segments separated by\n semicolons. Previously it only returned the first segment\n on platforms with Glibc.\n - gh-126699: Allow collections.abc.AsyncIterator to be a base\n for Protocols.\n - gh-126654: Fix crash when non-dict was passed to several\n functions in _interpreters module.\n - gh-104745: Limit starting a patcher (from\n unittest.mock.patch() or unittest.mock.patch.object()) more\n than once without stopping it\n - gh-126595: Fix a crash when instantiating itertools.count\n with an initial count of sys.maxsize on debug builds. Patch\n by B\u00e9n\u00e9dikt Tran.\n - gh-120423: Fix issue where urllib.request.pathname2url()\n mishandled Windows paths with embedded forward slashes.\n - gh-126565: Improve performances of zipfile.Path.open() for\n non-reading modes.\n - gh-126505: Fix bugs in compiling case-insensitive regular\n expressions with character classes containing non-BMP\n characters: upper-case non-BMP character did was ignored\n and the ASCII flag was ignored when matching a character\n range whose upper bound is beyond the BMP region.\n - gh-117378: Fixed the multiprocessing \u0027forkserver\u0027\n start method forkserver process to correctly inherit\n the parent\u2019s sys.path during the importing of\n multiprocessing.set_forkserver_preload() modules in the\n same manner as sys.path is configured in workers before\n executing work items.\n - This bug caused some forkserver module preloading to\n silently fail to preload. This manifested as a performance\n degration in child processes when the sys.path was required\n due to additional repeated work in every worker.\n - It could also have a side effect of \u0027\u0027 remaining in\n sys.path during forkserver preload imports instead of the\n absolute path from os.getcwd() at multiprocessing import\n time used in the worker sys.path.\n - The sys.path differences between phases in the child\n process could potentially have caused preload to import\n incorrect things from the wrong location. We are unaware of\n that actually having happened in practice.\n - gh-125679: The multiprocessing.Lock and\n multiprocessing.RLock repr values no longer say \u201cunknown\u201d\n on macOS.\n - gh-126476: Raise calendar.IllegalMonthError (now a subclass\n of IndexError) for calendar.month() when the input month is\n not correct.\n - gh-126489: The Python implementation of pickle no longer\n calls pickle.Pickler.persistent_id() for the result of\n persistent_id().\n - gh-126313: Fix an issue in curses.napms() when\n curses.initscr() has not yet been called. Patch by B\u00e9n\u00e9dikt\n Tran.\n - gh-126303: Fix pickling and copying of os.sched_param\n objects.\n - gh-126138: Fix a use-after-free crash on asyncio.Task\n objects whose underlying coroutine yields an object that\n implements an evil __getattribute__(). Patch by Nico\n Posada.\n - gh-126220: Fix crash in cProfile.Profile and\n _lsprof.Profiler when their callbacks were directly called\n with 0 arguments.\n - gh-126212: Fix issue where urllib.request.pathname2url()\n and url2pathname() removed slashes from Windows DOS drive\n paths and URLs.\n - gh-126223: Raise a UnicodeEncodeError instead of a\n SystemError upon calling _interpreters.create() with an\n invalid Unicode character.\n - gh-126205: Fix issue where urllib.request.pathname2url()\n generated URLs beginning with four slashes (rather than\n two) when given a Windows UNC path.\n - gh-126105: Fix a crash in ast when the ast.AST._fields\n attribute is deleted.\n - gh-126106: Fixes a possible NULL pointer dereference in\n ssl.\n - gh-126080: Fix a use-after-free crash on asyncio.Task\n objects for which the underlying event loop implements an\n evil __getattribute__(). Reported by Nico-Posada. Patch by\n B\u00e9n\u00e9dikt Tran.\n - gh-126083: Fixed a reference leak in asyncio.Task objects\n when reinitializing the same object with a non-None\n context. Patch by Nico Posada.\n - gh-125984: Fix use-after-free crashes on asyncio.Future\n objects for which the underlying event loop implements an\n evil __getattribute__(). Reported by Nico-Posada. Patch by\n B\u00e9n\u00e9dikt Tran.\n - gh-125969: Fix an out-of-bounds crash when an evil\n asyncio.loop.call_soon() mutates the length of the internal\n callbacks list. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-125966: Fix a use-after-free crash in\n asyncio.Future.remove_done_callback(). Patch by B\u00e9n\u00e9dikt\n Tran.\n - gh-125789: Fix possible crash when mutating list of\n callbacks returned by asyncio.Future._callbacks. It\n now always returns a new copy in C implementation\n _asyncio. Patch by Kumar Aditya.\n - gh-124452: Fix an issue in\n email.policy.EmailPolicy.header_source_parse() and\n email.policy.Compat32.header_source_parse() that introduced\n spurious leading whitespaces into header values when the\n header includes a newline character after the header name\n delimiter (:) and before the value.\n - gh-125884: Fixed the bug for pdb where it can\u2019t set\n breakpoints on functions with certain annotations.\n - gh-125355: Fix several bugs in\n argparse.ArgumentParser.parse_intermixed_args().\n - The parser no longer changes temporarily during\n parsing.\n - Default values are not processed twice.\n - Required mutually exclusive groups containing\n positional arguments are now supported.\n - The missing arguments report now includes the names of\n all required optional and positional arguments.\n - Unknown options can be intermixed with positional\n arguments in parse_known_intermixed_args().\n - gh-125666: Avoid the exiting the interpreter if a null byte\n is given as input in the new REPL.\n - gh-125710: [Enum] fix hashable\u003c-\u003enonhashable comparisons\n for member values\n - gh-125631: Restore ability to set persistent_id and\n persistent_load attributes of instances of the Pickler and\n Unpickler classes in the pickle module.\n - gh-125378: Fixed the bug in pdb where after a multi-line\n command, an empty line repeats the first line of the\n multi-line command, instead of the full command.\n - gh-125682: Reject non-ASCII digits in the Python\n implementation of json.loads() conforming to the JSON\n specification.\n - gh-125660: Reject invalid unicode escapes for Python\n implementation of json.loads().\n - gh-125259: Fix the notes removal logic for errors thrown in\n enum initialization.\n - gh-125590: Allow FrameLocalsProxy to delete and pop if the\n key is not a fast variable.\n - gh-125519: Improve traceback if importlib.reload() is\n called with an object that is not a module. Patch by Alex\n Waygood.\n - gh-125451: Fix deadlock when\n concurrent.futures.ProcessPoolExecutor shuts down\n concurrently with an error when feeding a job to a worker\n process.\n - gh-125422: Fixed the bug where pdb and bdb can step into\n the bottom caller frame.\n - gh-100141: Fixed the bug where pdb will be stuck in an\n infinite loop when debugging an empty file.\n - gh-125115: Fixed a bug in pdb where arguments starting with\n - can\u2019t be passed to the debugged script.\n - gh-53203: Fix time.strptime() for %c, %x and %X formats\n in many locales that use non-ASCII digits, like Persian,\n Burmese, Odia and Shan.\n - gh-125398: Fix the conversion of the VIRTUAL_ENV path in\n the activate script in venv when running in Git Bash for\n Windows.\n - gh-125316: Fix using functools.partial() as enum.Enum\n member. A FutureWarning with suggestion to use\n enum.member() is now emitted when the partial instance is\n used as an enum member.\n - gh-125245: Fix race condition when importing\n collections.abc, which could incorrectly return an empty\n module.\n - gh-125243: Fix data race when creating zoneinfo.ZoneInfo\n objects in the free threading build.\n - gh-125254: Fix a bug where ArgumentError includes the\n incorrect ambiguous option in argparse.\n - gh-125235: Keep tkinter TCL paths in venv pointing to base\n installation on Windows.\n - gh-61011: Fix inheritance of nested mutually\n exclusive groups from parent parser in\n argparse.ArgumentParser. Previously, all nested mutually\n exclusive groups lost their connection to the group\n containing them and were displayed as belonging directly to\n the parser.\n - gh-52551: Fix encoding issues in time.strftime(), the\n strftime() method of the datetime classes datetime, date\n and time and formatting of these classes. Characters\n not encodable in the current locale are now acceptable\n in the format string. Surrogate pairs and sequence\n of surrogatescape-encoded bytes are no longer\n recombinated. Embedded null character no longer terminates\n the format string.\n - gh-125118: Don\u2019t copy arbitrary values to _Bool in the\n struct module.\n - gh-125069: Fix an issue where providing a pathlib.PurePath\n object as an initializer argument to a second PurePath\n object with a different parser resulted in arguments to\n the former object\u2019s initializer being joined by the latter\n object\u2019s parser.\n - gh-125096: If the PYTHON_BASIC_REPL environment variable\n is set, the site module no longer imports the _pyrepl\n module. Moreover, the site module now respects -E and -I\n command line options: ignore PYTHON_BASIC_REPL in this\n case. Patch by Victor Stinner.\n - gh-124969: Fix locale.nl_langinfo(locale.ALT_DIGITS) on\n platforms with glibc. Now it returns a string consisting of\n up to 100 semicolon-separated symbols (an empty string in\n most locales) on all Posix platforms. Previously it only\n returned the first symbol or an empty string.\n - gh-124960: Fix support for the barry_as_FLUFL future flag\n in the new REPL.\n - gh-124984: Fixed thread safety in ssl in the free-threaded\n build. OpenSSL operations are now protected by a per-object\n lock.\n - gh-124958: Fix refcycles in exceptions raised from\n asyncio.TaskGroup and the python implementation of\n asyncio.Future\n - gh-53203: Fix time.strptime() for %c and %x formats in many\n locales: Arabic, Bislama, Breton, Bodo, Kashubian, Chuvash,\n Estonian, French, Irish, Ge\u2019ez, Gurajati, Manx Gaelic,\n Hebrew, Hindi, Chhattisgarhi, Haitian Kreyol, Japanese,\n Kannada, Korean, Marathi, Malay, Norwegian, Nynorsk,\n Punjabi, Rajasthani, Tok Pisin, Yoruba, Yue Chinese,\n Yau/Nungon and Chinese.\n - gh-124917: Allow calling os.path.exists() and\n os.path.lexists() with keyword arguments on Windows. Fixes\n a regression in 3.13.0.\n - gh-124653: Fix detection of the minimal Queue API needed by\n the logging module. Patch by B\u00e9n\u00e9dikt Tran.\n - gh-124858: Fix reference cycles left in tracebacks\n in asyncio.open_connection() when used with\n happy_eyeballs_delay\n - gh-124390: Fixed AssertionError when using\n asyncio.staggered.staggered_race() with\n asyncio.eager_task_factory.\n - gh-124651: Properly quote template strings in venv\n activation scripts (bsc#1232241, CVE-2024-9287).\n - gh-116850: Fix argparse for namespaces with not directly\n writable dict (e.g. classes).\n - gh-58573: Fix conflicts between abbreviated long options in\n the parent parser and subparsers in argparse.\n - gh-124594: All asyncio REPL prompts run in the same\n context. Contributed by Bartosz S\u0142awecki.\n - gh-61181: Fix support of choices with string value in\n argparse. Substrings of the specified string no longer\n considered valid values.\n - gh-80259: Fix argparse support of positional arguments with\n nargs=\u0027?\u0027, default=argparse.SUPPRESS and specified type.\n - gh-120378: Fix a crash related to an integer overflow in\n curses.resizeterm() and curses.resize_term().\n - gh-123884: Fixed bug in itertools.tee() handling of other\n tee inputs (a tee in a tee). The output now has the\n promised n independent new iterators. Formerly, the first\n iterator was identical (not independent) to the input\n iterator. This would sometimes give surprising results.\n - gh-58956: Fixed a bug in pdb where sometimes the breakpoint\n won\u2019t trigger if it was set on a function which is already\n in the call stack.\n - gh-124345: argparse vim supports abbreviated single-dash\n long options separated by = from its value.\n - gh-104860: Fix disallowing abbreviation of single-dash long\n options in argparse with allow_abbrev=False.\n - gh-63143: Fix parsing mutually exclusive arguments in\n argparse. Arguments with the value identical to the default\n value (e.g. booleans, small integers, empty or 1-character\n strings) are no longer considered \u201cnot present\u201d.\n - gh-72795: Positional arguments with nargs equal to \u0027*\u0027 or\n argparse.REMAINDER are no longer required. This allows to\n use positional argument with nargs=\u0027*\u0027 and without default\n in mutually exclusive group and improves error message\n about required arguments.\n - gh-59317: Fix parsing positional argument with nargs equal\n to \u0027?\u0027 or \u0027*\u0027 if it is preceded by an option and another\n positional argument.\n - gh-53780: argparse now ignores the first \u0027--\u0027 (double dash)\n between an option and command.\n - gh-124217: Add RFC 9637 reserved IPv6 block 3fff::/20 in\n ipaddress module.\n - gh-81691: Fix handling of multiple \u0027--\u0027 (double dashes)\n in argparse. Only the first one has now been removed, all\n subsequent ones are now taken literally.\n - gh-123978: Remove broken time.thread_time() and\n time.thread_time_ns() on NetBSD.\n - gh-124008: Fix possible crash (in debug build), incorrect\n output or returning incorrect value from raw binary write()\n when writing to console on Windows.\n - gh-123935: Fix parent slots detection for dataclasses that\n inherit from classes with __dictoffset__.\n - gh-122765: Fix unbalanced quote errors occurring when\n activate.csh in venv was sourced with a custom prompt\n containing unpaired quotes or newlines.\n - gh-123370: Fix the canvas not clearing after running\n turtledemo clock.\n - gh-116810: Resolve a memory leak introduced in CPython\n 3.10\u2019s ssl when the ssl.SSLSocket.session property was\n accessed. Speeds up read and write access to said property\n by no longer unnecessarily cloning session objects via\n serialization.\n - gh-120754: Update unbounded read calls in zipfile to\n specify an explicit size putting a limit on how much data\n they may read. This also updates handling around ZIP max\n comment size to match the standard instead of reading\n comments that are one byte too long.\n - gh-70764: Fixed an issue where inspect.getclosurevars()\n would incorrectly classify an attribute name as a global\n variable when the name exists both as an attribute name and\n a global variable.\n - gh-118289: posixpath.realpath() now raises\n NotADirectoryError when strict mode is enabled and a\n non-directory path with a trailing slash is supplied.\n - gh-119826: Always return an absolute path for\n os.path.abspath() on Windows.\n - gh-117766: Always use str() to print choices in argparse.\n - gh-101955: Fix SystemError when match regular expression\n pattern containing some combination of possessive\n quantifier, alternative and capture group.\n - gh-88110: Fixed multiprocessing.Process reporting a\n .exitcode of 1 even on success when using the \u0027fork\u0027 start\n method while using a concurrent.futures.ThreadPoolExecutor.\n - gh-71936: Fix a race condition in\n multiprocessing.pool.Pool.\n - bpo-46128: Strip unittest.IsolatedAsyncioTestCase stack\n frames from reported stacktraces.\n - bpo-14074: Fix argparse metavar processing to allow\n positional arguments to have a tuple metavar.\n - IDLE\n - gh-122392: Increase currently inadequate vertical spacing\n for the IDLE browsers (path, module, and stack) on\n high-resolution monitors.\n - Documentation\n - gh-126622: Added stub pages for removed modules explaining\n their removal, where to find replacements, and linking to\n the last Python version that supported them. Contributed by\n Ned Batchelder.\n - gh-125277: Require Sphinx 7.2.6 or later to build the\n Python documentation. Patch by Adam Turner.\n - gh-124872: Added definitions for context, current\n context, and context management protocol, updated\n related definitions to be consistent, and expanded the\n documentation for contextvars.Context.\n - gh-125018: The importlib.metadata documentation now\n includes semantic cross-reference targets for the\n significant documented APIs. This means intersphinx\n references like importlib.metadata.version() will now work\n as expected.\n - gh-70870: Clarified the dual usage of the term \u201cfree\n variable\u201d (both the formal meaning of any reference\n to names defined outside the local scope, and the\n narrower pragmatic meaning of nonlocal variables named in\n co_freevars).\n - gh-121277: Writers of CPython\u2019s documentation can now use\n next as the version for the versionchanged, versionadded,\n deprecated directives.\n - gh-60712: Include the object type in the lists of\n documented types. Change by Furkan Onder and Martin Panter.\n - bpo-34008: The Py_Main() documentation moved from the\n \u201cVery High Level API\u201d section to the \u201cInitialization and\n Finalization\u201d section.\n - Also make it explicit that we expect Py_Main to\n typically be called instead of Py_Initialize rather\n than after it (since Py_Main makes its own call to\n Py_Initialize). Document that calling both is supported\n but is version dependent on which settings will be applied\n correctly.\n - Core and Builtins\n - gh-113841: Fix possible undefined behavior division by zero\n in complex\u2019s _Py_c_pow().\n - gh-127020: Fix a crash in the free threading build\n when PyCode_GetCode(), PyCode_GetVarnames(),\n PyCode_GetCellvars(), or PyCode_GetFreevars() were called\n from multiple threads at the same time.\n - gh-126980: Fix __buffer__() of bytearray crashing when READ\n or WRITE are passed as flags.\n - gh-126881: Fix crash in finalization of dtoa state. Patch\n by Kumar Aditya.\n - gh-126341: Now ValueError is raised instead of SystemError\n when trying to iterate over a released memoryview object.\n - gh-126688: Fix a crash when calling os.fork() on some\n operating systems, including SerenityOS.\n - gh-126066: Fix importlib to not write an incomplete\n .pyc files when a ulimit or some other operating system\n mechanism is preventing the write to go through fully.\n - gh-126312: Fix crash during garbage collection on an object\n frozen by gc.freeze() on the free-threaded build.\n - gh-126139: Provide better error location when attempting to\n use a future statement with an unknown future feature.\n - gh-126018: Fix a crash in sys.audit() when passing a\n non-string as first argument and Python was compiled in\n debug mode.\n - gh-125942: On Android, the errors setting of sys.stdout was\n changed from surrogateescape to backslashreplace.\n - gh-125859: Fix a crash in the free threading build when\n gc.get_objects() or gc.get_referrers() is called during an\n in-progress garbage collection.\n - gh-125703: Correctly honour tracemalloc hooks in\n specialized Py_DECREF paths. Patch by Pablo Galindo\n - gh-125593: Use color to highlight error locations in\n traceback from exception group\n - gh-125444: Fix illegal instruction for older Arm\n architectures. Patch by Diego Russo, testing by Ross\n Burton.\n - gh-124375: Fix a crash in the free threading build when the\n GC runs concurrently with a new thread starting.\n - gh-125221: Fix possible race condition when calling\n __reduce_ex__() for the first time in the free threading\n build.\n - gh-125038: Fix crash when iterating over a generator\n expression after direct changes on gi_frame.f_locals. Patch\n by Mikhail Efimov.\n - gh-123378: Fix a crash in the __str__() method of\n UnicodeError objects when the UnicodeError.start and\n UnicodeError.end values are invalid or out-of-range. Patch\n by B\u00e9n\u00e9dikt Tran.\n - gh-116510: Fix a crash caused by immortal interned strings\n being shared between sub-interpreters that use basic\n single-phase init. In that case, the string can be used\n by an interpreter that outlives the interpreter that\n created and interned it. For interpreters that share\n obmalloc state, also share the interned dict with the main\n interpreter.\n - gh-122878: Use the pager binary, if available (e.g. on\n Debian and derivatives), to display REPL help().\n - gh-124188: Fix reading and decoding a line from the source\n file witn non-UTF-8 encoding for syntax errors raised in\n the compiler.\n - gh-123930: Improve the error message when a script\n shadowing a module from the standard library causes\n ImportError to be raised during a \u201cfrom\u201d import. Similarly,\n improve the error message when a script shadowing a third\n party module attempts to \u201cfrom\u201d import an attribute from\n that third party module while still initialising.\n - gh-122907: Building with HAVE_DYNAMIC_LOADING\n now works as well as it did in 3.12. Existing\n deficiences will be addressed separately. (See\n https://github.com/python/cpython/issues/122950.)\n - gh-118950: Fix bug where SSLProtocol.connection_lost wasn\u2019t\n getting called when OSError was thrown on writing to\n socket.\n - gh-113570: Fixed a bug in reprlib.repr where it incorrectly\n called the repr method on shadowed Python built-in types.\n - gh-109746: If _thread.start_new_thread() fails to start a\n new thread, it deletes its state from interpreter and thus\n avoids its repeated cleanup on finalization.\n - C API\n - gh-126554: Fix error handling in ctypes.CDLL objects which\n could result in a crash in rare situations.\n - gh-125608: Fix a bug where dictionary watchers\n (e.g., PyDict_Watch()) on an object\u2019s attribute dictionary\n (__dict__) were not triggered when the object\u2019s attributes\n were modified.\n - bpo-34008: Added Py_IsInitialized to the list of APIs that\n are safe to call before the interpreter is initialized, and\n updated the embedding tests to cover it.\n - Build\n - gh-123877: Set wasm32-wasip1 as the WASI target. The old\n wasm32-wasi target is deprecated so it can be used for an\n eventual WASI 1.0.\n - gh-89640: Hard-code float word ordering as little endian on\n WASM.\n - gh-125940: The Android build now supports 16 KB page sizes.\n - gh-89640: Improve detection of float word ordering on Linux\n when link-time optimizations are enabled.\n - gh-125269: Fix detection of whether -latomic is needed when\n cross-compiling CPython using the configure script.\n - gh-121634: Allow for specifying the target compile triple\n for WASI.\n - gh-122578: Use WASI SDK 24 for testing.\n - gh-115382: Fix cross compile failures when the host and\n target SOABIs match.\n\n- Skip PGO with %want_reproducible_builds (bsc#1239210).\n- Configure externally_managed with a bcond https://en.opensuse.org/openSUSE:Python:Externally_managed (bsc#1228165).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2025-2074,SUSE-SLE-Module-Python3-15-SP7-2025-2074", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02074-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2025:02074-1", "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502074-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2025:02074-1", "url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040440.html" }, { "category": "self", "summary": "SUSE Bug 1228165", "url": "https://bugzilla.suse.com/1228165" }, { "category": "self", "summary": "SUSE Bug 1232241", "url": "https://bugzilla.suse.com/1232241" }, { "category": "self", "summary": "SUSE Bug 1234290", "url": "https://bugzilla.suse.com/1234290" }, { "category": "self", "summary": "SUSE Bug 1236705", "url": "https://bugzilla.suse.com/1236705" }, { "category": "self", "summary": "SUSE Bug 1238450", "url": "https://bugzilla.suse.com/1238450" }, { "category": "self", "summary": "SUSE Bug 1239210", "url": "https://bugzilla.suse.com/1239210" }, { "category": "self", "summary": "SUSE Bug 1243273", "url": "https://bugzilla.suse.com/1243273" }, { "category": "self", "summary": "SUSE Bug 1244032", "url": "https://bugzilla.suse.com/1244032" }, { "category": "self", "summary": "SUSE Bug 1244056", "url": "https://bugzilla.suse.com/1244056" }, { "category": "self", "summary": "SUSE Bug 1244059", "url": "https://bugzilla.suse.com/1244059" }, { "category": "self", "summary": "SUSE Bug 1244060", "url": "https://bugzilla.suse.com/1244060" }, { "category": "self", "summary": "SUSE CVE CVE-2024-12254 page", "url": "https://www.suse.com/security/cve/CVE-2024-12254/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-12718 page", "url": "https://www.suse.com/security/cve/CVE-2024-12718/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-9287 page", "url": "https://www.suse.com/security/cve/CVE-2024-9287/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-0938 page", "url": "https://www.suse.com/security/cve/CVE-2025-0938/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-1795 page", "url": "https://www.suse.com/security/cve/CVE-2025-1795/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-4138 page", "url": "https://www.suse.com/security/cve/CVE-2025-4138/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-4330 page", "url": "https://www.suse.com/security/cve/CVE-2025-4330/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-4516 page", "url": "https://www.suse.com/security/cve/CVE-2025-4516/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-4517 page", "url": "https://www.suse.com/security/cve/CVE-2025-4517/" } ], "title": "Security update for python313", "tracking": { "current_release_date": "2025-06-24T07:26:36Z", "generator": { "date": "2025-06-24T07:26:36Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2025:02074-1", "initial_release_date": "2025-06-24T07:26:36Z", "revision_history": [ { "date": "2025-06-24T07:26:36Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "product": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "product_id": "libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-base-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-base-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-base-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-curses-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-curses-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-curses-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-dbm-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-dbm-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-dbm-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-devel-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-devel-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-devel-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-doc-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-doc-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-doc-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-doc-devhelp-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-idle-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-idle-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-idle-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-testsuite-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-testsuite-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-testsuite-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-tk-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-tk-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-tk-3.13.5-150700.4.11.1.aarch64" } }, { "category": "product_version", "name": "python313-tools-3.13.5-150700.4.11.1.aarch64", "product": { "name": "python313-tools-3.13.5-150700.4.11.1.aarch64", "product_id": "python313-tools-3.13.5-150700.4.11.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libpython3_13-1_0-64bit-3.13.5-150700.4.11.1.aarch64_ilp32", "product": { "name": "libpython3_13-1_0-64bit-3.13.5-150700.4.11.1.aarch64_ilp32", "product_id": "libpython3_13-1_0-64bit-3.13.5-150700.4.11.1.aarch64_ilp32" } }, { "category": "product_version", "name": "python313-64bit-3.13.5-150700.4.11.1.aarch64_ilp32", "product": { "name": "python313-64bit-3.13.5-150700.4.11.1.aarch64_ilp32", "product_id": "python313-64bit-3.13.5-150700.4.11.1.aarch64_ilp32" } }, { "category": "product_version", "name": "python313-base-64bit-3.13.5-150700.4.11.1.aarch64_ilp32", "product": { "name": "python313-base-64bit-3.13.5-150700.4.11.1.aarch64_ilp32", "product_id": "python313-base-64bit-3.13.5-150700.4.11.1.aarch64_ilp32" } } ], "category": "architecture", "name": "aarch64_ilp32" }, { "branches": [ { "category": "product_version", "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.i586", "product": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.i586", "product_id": "libpython3_13-1_0-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.i586", "product": { "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.i586", "product_id": "libpython3_13t1_0-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-3.13.5-150700.4.11.1.i586", "product_id": "python313-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-base-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-base-3.13.5-150700.4.11.1.i586", "product_id": "python313-base-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-curses-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-curses-3.13.5-150700.4.11.1.i586", "product_id": "python313-curses-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-dbm-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-dbm-3.13.5-150700.4.11.1.i586", "product_id": "python313-dbm-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-devel-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-devel-3.13.5-150700.4.11.1.i586", "product_id": "python313-devel-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-doc-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-doc-3.13.5-150700.4.11.1.i586", "product_id": "python313-doc-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.i586", "product_id": "python313-doc-devhelp-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-idle-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-idle-3.13.5-150700.4.11.1.i586", "product_id": "python313-idle-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-base-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-base-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-base-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-curses-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-curses-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-curses-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-dbm-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-devel-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-devel-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-devel-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-idle-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-idle-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-idle-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-testsuite-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-tk-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-tk-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-tk-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-nogil-tools-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-nogil-tools-3.13.5-150700.4.11.1.i586", "product_id": "python313-nogil-tools-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-testsuite-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-testsuite-3.13.5-150700.4.11.1.i586", "product_id": "python313-testsuite-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-tk-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-tk-3.13.5-150700.4.11.1.i586", "product_id": "python313-tk-3.13.5-150700.4.11.1.i586" } }, { "category": "product_version", "name": "python313-tools-3.13.5-150700.4.11.1.i586", "product": { "name": "python313-tools-3.13.5-150700.4.11.1.i586", "product_id": "python313-tools-3.13.5-150700.4.11.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "product_id": "libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.ppc64le", "product_id": "libpython3_13t1_0-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-base-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-base-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-base-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-curses-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-curses-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-curses-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-dbm-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-dbm-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-dbm-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-devel-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-devel-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-devel-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-doc-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-doc-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-doc-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-doc-devhelp-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-idle-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-idle-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-idle-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-base-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-base-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-base-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-curses-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-curses-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-curses-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-dbm-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-devel-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-devel-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-devel-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-idle-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-idle-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-idle-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-testsuite-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-tk-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-tk-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-tk-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-nogil-tools-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-nogil-tools-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-nogil-tools-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-testsuite-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-testsuite-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-testsuite-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-tk-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-tk-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-tk-3.13.5-150700.4.11.1.ppc64le" } }, { "category": "product_version", "name": "python313-tools-3.13.5-150700.4.11.1.ppc64le", "product": { "name": "python313-tools-3.13.5-150700.4.11.1.ppc64le", "product_id": "python313-tools-3.13.5-150700.4.11.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "product": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "product_id": "libpython3_13-1_0-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.s390x", "product": { "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.s390x", "product_id": "libpython3_13t1_0-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-3.13.5-150700.4.11.1.s390x", "product_id": "python313-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-base-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-base-3.13.5-150700.4.11.1.s390x", "product_id": "python313-base-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-curses-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-curses-3.13.5-150700.4.11.1.s390x", "product_id": "python313-curses-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-dbm-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-dbm-3.13.5-150700.4.11.1.s390x", "product_id": "python313-dbm-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-devel-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-devel-3.13.5-150700.4.11.1.s390x", "product_id": "python313-devel-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-doc-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-doc-3.13.5-150700.4.11.1.s390x", "product_id": "python313-doc-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.s390x", "product_id": "python313-doc-devhelp-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-idle-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-idle-3.13.5-150700.4.11.1.s390x", "product_id": "python313-idle-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-base-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-base-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-base-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-curses-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-curses-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-curses-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-dbm-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-devel-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-devel-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-devel-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-idle-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-idle-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-idle-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-testsuite-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-tk-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-tk-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-tk-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-nogil-tools-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-nogil-tools-3.13.5-150700.4.11.1.s390x", "product_id": "python313-nogil-tools-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-testsuite-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-testsuite-3.13.5-150700.4.11.1.s390x", "product_id": "python313-testsuite-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-tk-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-tk-3.13.5-150700.4.11.1.s390x", "product_id": "python313-tk-3.13.5-150700.4.11.1.s390x" } }, { "category": "product_version", "name": "python313-tools-3.13.5-150700.4.11.1.s390x", "product": { "name": "python313-tools-3.13.5-150700.4.11.1.s390x", "product_id": "python313-tools-3.13.5-150700.4.11.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "product": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "product_id": "libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "libpython3_13-1_0-32bit-3.13.5-150700.4.11.1.x86_64", "product": { "name": "libpython3_13-1_0-32bit-3.13.5-150700.4.11.1.x86_64", "product_id": "libpython3_13-1_0-32bit-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.x86_64", "product": { "name": "libpython3_13t1_0-3.13.5-150700.4.11.1.x86_64", "product_id": "libpython3_13t1_0-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-32bit-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-32bit-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-32bit-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-base-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-base-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-base-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-base-32bit-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-base-32bit-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-base-32bit-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-curses-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-curses-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-curses-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-dbm-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-dbm-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-dbm-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-devel-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-devel-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-devel-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-doc-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-doc-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-doc-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-doc-devhelp-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-doc-devhelp-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-idle-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-idle-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-idle-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-base-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-base-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-base-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-curses-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-curses-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-curses-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-dbm-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-dbm-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-devel-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-devel-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-devel-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-idle-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-idle-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-idle-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-testsuite-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-testsuite-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-tk-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-tk-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-tk-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-nogil-tools-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-nogil-tools-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-nogil-tools-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-testsuite-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-testsuite-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-testsuite-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-tk-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-tk-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-tk-3.13.5-150700.4.11.1.x86_64" } }, { "category": "product_version", "name": "python313-tools-3.13.5-150700.4.11.1.x86_64", "product": { "name": "python313-tools-3.13.5-150700.4.11.1.x86_64", "product_id": "python313-tools-3.13.5-150700.4.11.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Python 3 15 SP7", "product": { "name": "SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-python3:15:sp7" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x" }, "product_reference": "libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-base-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-base-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-base-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-base-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-base-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-base-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-base-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-base-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-curses-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-curses-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-curses-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-curses-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-curses-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-curses-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-curses-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-curses-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-dbm-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-dbm-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-dbm-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-dbm-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-dbm-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-dbm-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-dbm-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-dbm-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-devel-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-devel-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-devel-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-devel-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-devel-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-devel-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-devel-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-devel-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-idle-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-idle-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-idle-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-idle-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-idle-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-idle-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-idle-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-idle-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tk-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-tk-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tk-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-tk-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tk-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-tk-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tk-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-tk-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tools-3.13.5-150700.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64" }, "product_reference": "python313-tools-3.13.5-150700.4.11.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tools-3.13.5-150700.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le" }, "product_reference": "python313-tools-3.13.5-150700.4.11.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tools-3.13.5-150700.4.11.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x" }, "product_reference": "python313-tools-3.13.5-150700.4.11.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tools-3.13.5-150700.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP7", "product_id": "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" }, "product_reference": "python313-tools-3.13.5-150700.4.11.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP7" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-12254", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-12254" } ], "notes": [ { "category": "general", "text": "Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()\n method would not \"pause\" writing and signal to the Protocol to drain \nthe buffer to the wire once the write buffer reached the \"high-water \nmark\". Because of this, Protocols would not periodically drain the write\n buffer potentially leading to memory exhaustion.\n\n\n\n\n\nThis\n vulnerability likely impacts a small number of users, you must be using\n Python 3.12.0 or later, on macOS or Linux, using the asyncio module \nwith protocols, and using .writelines() method which had new \nzero-copy-on-write behavior in Python 3.12.0 and later. If not all of \nthese factors are true then your usage of Python is unaffected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-12254", "url": "https://www.suse.com/security/cve/CVE-2024-12254" }, { "category": "external", "summary": "SUSE Bug 1234290 for CVE-2024-12254", "url": "https://bugzilla.suse.com/1234290" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "important" } ], "title": "CVE-2024-12254" }, { "cve": "CVE-2024-12718", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-12718" } ], "notes": [ { "category": "general", "text": "Allows modifying some file metadata (e.g. last modified) with filter=\"data\" or file permissions (chmod) with filter=\"tar\" of files outside the extraction directory.\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don\u0027t include the extraction filter feature.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it\u0027s important to avoid installing source distributions with suspicious links.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-12718", "url": "https://www.suse.com/security/cve/CVE-2024-12718" }, { "category": "external", "summary": "SUSE Bug 1244056 for CVE-2024-12718", "url": "https://bugzilla.suse.com/1244056" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2024-12718" }, { "cve": "CVE-2024-9287", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-9287" } ], "notes": [ { "category": "general", "text": "A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment \"activation\" scripts (ie \"source venv/bin/activate\"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren\u0027t activated before being used (ie \"./venv/bin/python\") are not affected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-9287", "url": "https://www.suse.com/security/cve/CVE-2024-9287" }, { "category": "external", "summary": "SUSE Bug 1232241 for CVE-2024-9287", "url": "https://bugzilla.suse.com/1232241" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2024-9287" }, { "cve": "CVE-2025-0938", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-0938" } ], "notes": [ { "category": "general", "text": "The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn\u0027t valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-0938", "url": "https://www.suse.com/security/cve/CVE-2025-0938" }, { "category": "external", "summary": "SUSE Bug 1236705 for CVE-2025-0938", "url": "https://bugzilla.suse.com/1236705" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2025-0938" }, { "cve": "CVE-2025-1795", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-1795" } ], "notes": [ { "category": "general", "text": "During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-1795", "url": "https://www.suse.com/security/cve/CVE-2025-1795" }, { "category": "external", "summary": "SUSE Bug 1238450 for CVE-2025-1795", "url": "https://bugzilla.suse.com/1238450" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "low" } ], "title": "CVE-2025-1795" }, { "cve": "CVE-2025-4138", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-4138" } ], "notes": [ { "category": "general", "text": "Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don\u0027t include the extraction filter feature.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it\u0027s important to avoid installing source distributions with suspicious links.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-4138", "url": "https://www.suse.com/security/cve/CVE-2025-4138" }, { "category": "external", "summary": "SUSE Bug 1244059 for CVE-2025-4138", "url": "https://bugzilla.suse.com/1244059" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2025-4138" }, { "cve": "CVE-2025-4330", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-4330" } ], "notes": [ { "category": "general", "text": "Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don\u0027t include the extraction filter feature.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it\u0027s important to avoid installing source distributions with suspicious links.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-4330", "url": "https://www.suse.com/security/cve/CVE-2025-4330" }, { "category": "external", "summary": "SUSE Bug 1244060 for CVE-2025-4330", "url": "https://bugzilla.suse.com/1244060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2025-4330" }, { "cve": "CVE-2025-4516", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-4516" } ], "notes": [ { "category": "general", "text": "There is an issue in CPython when using `bytes.decode(\"unicode_escape\", error=\"ignore|replace\")`. If you are not using the \"unicode_escape\" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-4516", "url": "https://www.suse.com/security/cve/CVE-2025-4516" }, { "category": "external", "summary": "SUSE Bug 1243273 for CVE-2025-4516", "url": "https://bugzilla.suse.com/1243273" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2025-4516" }, { "cve": "CVE-2025-4517", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-4517" } ], "notes": [ { "category": "general", "text": "Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=\"data\".\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don\u0027t include the extraction filter feature.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it\u0027s important to avoid installing source distributions with suspicious links.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-4517", "url": "https://www.suse.com/security/cve/CVE-2025-4517" }, { "category": "external", "summary": "SUSE Bug 1244032 for CVE-2025-4517", "url": "https://bugzilla.suse.com/1244032" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:libpython3_13-1_0-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-base-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-curses-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-dbm-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-devel-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-idle-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tk-3.13.5-150700.4.11.1.x86_64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.aarch64", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.ppc64le", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.s390x", "SUSE Linux Enterprise Module for Python 3 15 SP7:python313-tools-3.13.5-150700.4.11.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-06-24T07:26:36Z", "details": "moderate" } ], "title": "CVE-2025-4517" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…