Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisorydenial of servicefedoraFedora 43: python3.13 Critical Quadratic Complexity DoS ID 2025-6407a7ee7e
This is the eleventh maintenance release of Python 3.13. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-6407a7ee7e 2025-12-16 00:46:10.314061+00:00 -------------------------------------------------------------------------------- Name : python3.13 Product : Fedora 43 Version : 3.13.11 Release : 1.fc43 URL : https://www.python.org/ Summary : Version 3.13 of the Python interpreter Description : Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.13-libs package, which should be installed automatically along with python3.13. The remaining parts of the Python standard library are broken out into the python3.13-tkinter and python3.13-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.13-docs package. Packages containing additional libraries for Python are generally named with the "python3.13-" prefix. -------------------------------------------------------------------------------- Update Information: This is the eleventh maintenance release of Python 3.13 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 5 2025 Miro Hron\u010dok - 3.13.11-1 - Update to 3.13.11 * Wed Dec 3 2025 Tom\u0161 Hrn\u010diar - 3.13.10-1 - Update to 3.13.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2413057 - CVE-2025-6075 python3.13: Quadratic complexity in os.path.expandvars() with user-controlled template [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2413057 [ 2 ] Bug#2421628 - CVE-2025-12084 python3.13: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2421628 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6407a7ee7e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . An important update for Python 3.13 in Fedora 43 addressing critical issues and providing key enhancements. . Fedora 43 Python Update, Critical Software Release, Python Security Fix. . Severity: Critical. LinuxSecurity.com Team
Dec 16, 2025
•Critical
Fedora
89
security advisorydenial of servicefedoraFedora 43: python3.14 Critical Update Addresses Quadratic Complexity Bug
This is the second maintenance release of Python 3.14. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e235793f10 2025-12-10 01:33:03.602028+00:00 -------------------------------------------------------------------------------- Name : python3.14 Product : Fedora 43 Version : 3.14.2 Release : 1.fc43 URL : https://www.python.org/ Summary : Version 3.14 of the Python interpreter Description : Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. -------------------------------------------------------------------------------- Update Information: This is the second maintenance release of Python 3.14 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 5 2025 Miro Hron\u010dok - 3.14.2-1 - Update to Python 3.14.2 * Wed Dec 3 2025 Karolina Surma - 3.14.1-1 - Update to Python 3.14.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2393850 - kicad crashes during python runtime initialization https://bugzilla.redhat.com/show_bug.cgi?id=2393850 [ 2 ] Bug #2413058 - CVE-2025-6075 python3.14: Quadratic complexity in os.path.expandvars() with user-controlled template [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2413058 [ 3 ] Bug #2414940 - argparse colorize fails if a tty is not available, like in mod_wsgi https://bugzilla.redhat.com/show_bug.cgi?id=2414940 [ 4 ] Bug #2416523 - Python 3.14 Stack overflow check very very broken https://bugzilla.redhat.com/show_bug.cgi?id=2416523 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e235793f10' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 43 addresses security issues in Python 3.14 with critical updates and bug fixes.. Python Security, Fedora Update, System Integrity, Code Readability, Programming Language. . Severity: Important. LinuxSecurity.com Team
Dec 10, 2025
•Important
Fedora
100
security advisorymoderatedenial of serviceSUSE: python3 Moderate Denial of Service Issues Fix 2025:02802-1
* bsc#1244401 * bsc#1244705 * bsc#1247249 Cross-References: . # Security update for python3 Announcement ID: SUSE-SU-2025:02802-1 Release Date: 2025-08-14T15:10:00Z Rating: moderate References: * bsc#1244401 * bsc#1244705 * bsc#1247249 Cross-References: * CVE-2024-11168 * CVE-2025-6069 * CVE-2025-8194 CVSS scores: * CVE-2024-11168 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X * CVE-2024-11168 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-11168 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X * CVE-2024-11168 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-6069 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H * CVE-2025-6069 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2025-6069 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-8194 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-8194 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-8194 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) * CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249) Other fixes: \- Limitbuffer size for IPv6 address parsing (bsc#1244401). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2802=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python3-3.4.10-25.158.1 * python3-devel-3.4.10-25.158.1 * python3-base-debuginfo-3.4.10-25.158.1 * python3-debugsource-3.4.10-25.158.1 * python3-tk-3.4.10-25.158.1 * python3-devel-debuginfo-3.4.10-25.158.1 * python3-base-debuginfo-32bit-3.4.10-25.158.1 * libpython3_4m1_0-3.4.10-25.158.1 * python3-base-debugsource-3.4.10-25.158.1 * python3-base-3.4.10-25.158.1 * python3-tk-debuginfo-3.4.10-25.158.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.158.1 * python3-curses-debuginfo-3.4.10-25.158.1 * python3-debuginfo-3.4.10-25.158.1 * libpython3_4m1_0-debuginfo-3.4.10-25.158.1 * python3-curses-3.4.10-25.158.1 * libpython3_4m1_0-32bit-3.4.10-25.158.1 ## References: * https://www.suse.com/security/cve/CVE-2024-11168.html * https://www.suse.com/security/cve/CVE-2025-6069.html * https://www.suse.com/security/cve/CVE-2025-8194.html * https://bugzilla.suse.com/show_bug.cgi?id=1244401 * https://bugzilla.suse.com/show_bug.cgi?id=1244705 * https://bugzilla.suse.com/show_bug.cgi?id=1247249 . A resolution for critical vulnerabilities in Python 3 on SUSE Linux Enterprise Server has been implemented, targeting service disruption and data handling inconsistencies.. SUSE python3 security update denial of service vulnerabilities. . LinuxSecurity.com Team
Aug 14, 2025
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!