Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

openSUSE Leap 15.3: python39 Moderate Security Fix SUSE-SU-2025:4433-1

opensuse
Calendar Grey December 17, 2025
Dist Opensuse Esm H88
Install the latest openSUSE python39 security update to address issues and enhance protection with moderate severity risks.
An update that can now be installed.

Description

This update for python39 fixes the following issues:

* Update to 3.9.25:

* Security

* gh-137836: Add support of the \u201cplaintext\u201d element, RAWTEXT elements \u201cxmp\u201d, \u201ciframe\u201d, \u201cnoembed\u201d and \u201cnoframes\u201d, and optionally RAWTEXT element \u201cnoscript\u201d in html.parser.HTMLParser.

* gh-136063: email.message: ensure linear complexity for legacy HTTP parameters parsing. Patch by Bndikt Tran.

* Library

* gh-98793: Fix argument typechecks in _overlapped.WSAConnect() and _overlapped.Overlapped.WSASendTo() functions. bpo-44817: Ignore WinError 53 (ERROR_BAD_NETPATH), 65 (ERROR_NETWORK_ACCESS_DENIED) and 161 (ERROR_BAD_PATHNAME) when using ntpath.realpath().

* Core and Builtins

* gh-120384: Fix an array out of bounds crash in list_ass_subscript, which could be invoked via some specificly tailored input: including concurrent modification of a list object, where one thread assigns a slice and another clears it.

*...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate code execution remote access OpenSUSE python39

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.3

zypper in -t patch SUSE-2025-4433=1

* openSUSE Leap 15.6

zypper in -t patch openSUSE-SLE-15.6-2025-4433=1

Package List

* openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)

* python39-curses-3.9.25-150300.4.87.1

* python39-tools-3.9.25-150300.4.87.1

* python39-debuginfo-3.9.25-150300.4.87.1

* python39-testsuite-debuginfo-3.9.25-150300.4.87.1

* python39-3.9.25-150300.4.87.1

* python39-curses-debuginfo-3.9.25-150300.4.87.1

* python39-dbm-3.9.25-150300.4.87.1

* python39-doc-devhelp-3.9.25-150300.4.87.1

* python39-base-3.9.25-150300.4.87.1

* python39-idle-3.9.25-150300.4.87.1

* python39-tk-3.9.25-150300.4.87.1

* python39-debugsource-3.9.25-150300.4.87.1

* libpython3_9-1_0-3.9.25-150300.4.87.1

* python39-testsuite-3.9.25-150300.4.87.1

* python39-devel-3.9.25-150300.4.87.1

* python39-base-debuginfo-3.9.25-150300.4.87.1

* python39-core-debugsource-3.9.25-150300.4.87.1

* libpython3_9-1_0-debuginfo-3.9.25-150300.4.87.1

* python39-doc-3.9.25-150300.4.87.1

* python39-tk-debuginfo-3.9.25-150300.4.87.1

* python39-dbm-debuginfo-3.9.25-150300.4.87.1

* openSUSE Leap 15.3 (x86_64)

* libpython3_9-1_0-32bit-debuginfo-3.9.25-150300.4.87.1

*...

Read the Full Advisory

References

Announcement ID: SUSE-SU-2025:4433-1
Release Date: 2025-12-17T13:20:28Z
Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.6

Topics%20covered

Topics Covered

security advisory moderate code execution remote access OpenSUSE python39

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here