SUSE-SU-2025%3A21207-1

SUSE-SU-2025%3A21207-1 PUBLISHED

This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) is not checked by the 'zipfile' module (bsc#1251305). - CVE-2025-6075: Fixed the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables (bsc#1252974).

Affected Products

Vendor	Product	Versions
SUSE:Linux Micro 6.1	python311	0, 0
SUSE:Linux Micro 6.1	python311-core	0, 0

Timeline

Dec 9, 2025 CVE Published
Mar 23, 2026 CVE Updated

References

https://www.suse.com/support/update/announcement/2025/suse-su-202521207-1/ advisory
https://bugzilla.suse.com/1251305 report
https://bugzilla.suse.com/1252974 report
https://www.suse.com/security/cve/CVE-2025-6075 url
https://www.suse.com/security/cve/CVE-2025-8291 url

Open in Interactive Console →