SUSE-SU-2026:0027-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:0027-1

UNKNOWN

Security update for python3

Published Jan 5, 2026

Modified 2 weeks ago

Fix available

Details

This update for python3 fixes the following issues:

CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997)
CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400)
CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401)

Affected Packages(15 packages)

libpython3_6m1_0

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

3.6.15-150300.10.103.1

python3

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

3.6.15-150300.10.103.1

python3-base

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

3.6.15-150300.10.103.1

python3-core

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

3.6.15-150300.10.103.1

python3-curses