Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

openSUSE: Important Python 3.12 DoS Fixes Addressed in 2025:02048-1

suse
Calendar Grey June 20, 2025
Dist Suse Esm H88
The release of python312 addresses major concerns. Numerous security flaws have been patched to enhance overall system safety.
* bsc#1243273 * bsc#1244032 * bsc#1244056 * bsc#1244059 * bsc#1244060

Summary

## This update for python312 fixes the following issues: python312 was updated from version 3.12.9 to 3.12.11: * Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273) * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed tarfile extraction filters to be bypassed using crafted symlinks and hard links (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032) * Other changes and bugs fixed: * Added --single-process option to the Python test runner (regrtest). * Added support for text/x-rst MIME type. * Corrected issues in various modules. * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when flattening an email message using a modern email policy.

Topics%20covered

Topics Covered

security advisory security issue DoS important openSUSE python312

References

* bsc#1243273

* bsc#1244032

* bsc#1244056

* bsc#1244059

* bsc#1244060

Cross-

* CVE-2024-12718

* CVE-2025-4138

* CVE-2025-4330

* CVE-2025-4516

* CVE-2025-4517

CVSS scores:

* CVE-2024-12718 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

* CVE-2024-12718 ( NVD ): 10.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2024-12718 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

* CVE-2025-4138 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

* CVE-2025-4138 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2025-4330 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:02048-1
Release Date: 2025-06-20T12:40:50Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue DoS important openSUSE python312

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here