This update for python311 fixes the following issues:
* CVE-2025-0938: domain names containing square brackets are not identified as
incorrect by urlparse. (bsc#1236705)
Other fixes:
* Update to version 3.11.11.
* Remove -IVendor/ from python-config. (bsc#1231795)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch SUSE-2025-551=1 openSUSE-SLE-15.6-2025-551=1
* Basesystem Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-551=1
* Python 3 Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-551=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
* python311-idle-3.11.11-150600.3.16.2
* python311-debuginfo-3.11.11-150600.3.16.2
* python311-curses-debuginfo-3.11.11-150600.3.16.2
* libpython3_11-1_0-3.11.11-150600.3.16.2
* libpython3_11-1_0-debuginfo-3.11.11-150600.3.16.2
* python311-doc-3.11.11-150600.3.16.2
* python311-testsuite-debuginfo-3.11.11-150600.3.16.2
* python311-tools-3.11.11-150600.3.16.2
* python311-dbm-debuginfo-3.11.11-150600.3.16.2
* python311-3.11.11-150600.3.16.2
* python311-devel-3.11.11-150600.3.16.2
* python311-debugsource-3.11.11-150600.3.16.2
* python311-tk-3.11.11-150600.3.16.2
* python311-curses-3.11.11-150600.3.16.2
* python311-dbm-3.11.11-150600.3.16.2
* python311-testsuite-3.11.11-150600.3.16.2
* python311-doc-devhelp-3.11.11-150600.3.16.2
* python311-core-debugsource-3.11.11-150600.3.16.2
* python311-base-3.11.11-150600.3.16.2
* python311-tk-debuginfo-3.11.11-150600.3.16.2
* python311-base-debuginfo-3.11.11-150600.3.16.2
* openSUSE Leap 15.6 (x86_64)
*...
Read the Full Advisory* bsc#1228165
* bsc#1231795
* bsc#1236705
## References:
* https://www.suse.com/security/cve/CVE-2025-0938.html
* https://bugzilla.suse.com/show_bug.cgi?id=1228165
* https://bugzilla.suse.com/show_bug.cgi?id=1231795
* https://bugzilla.suse.com/show_bug.cgi?id=1236705
Get the latest Linux and open source security news straight to your inbox.