Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

SUSE: python3 Moderate Denial of Service Fix Advisory 2025:4538-1

suse
Calendar Grey December 31, 2025
Dist Suse Esm H88
SUSE security update addresses multiple issues in python3 with moderate severity impacting server functionality.
An update that solves three vulnerabilities can now be installed.

Summary

## This update for python3 fixes the following issues: * CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) * CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) * CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4538=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python3-devel-debuginfo-3.4.10-25.166.1

Topics%20covered

Topics Covered

security advisory moderate denial of service update SuSE python3

References

* bsc#1254400

* bsc#1254401

* bsc#1254997

Cross-

* CVE-2025-12084

* CVE-2025-13836

* CVE-2025-13837

CVSS scores:

* CVE-2025-12084 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-12084 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

* CVE-2025-12084 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-12084 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-13836 ( SUSE ): 6.3

Announcement ID: SUSE-SU-2025:4538-1
Release Date: 2025-12-31T15:05:25Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service update SuSE python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.