{"schema_version":"1.7.5","id":"SUSE-SU-2025:4221-1","published":"2025-11-25T08:02:49Z","modified":"2026-03-23T04:51:27.993186Z","related":["CVE-2025-6075","CVE-2025-8291"],"upstream":["CVE-2025-6075","CVE-2025-8291"],"summary":"Security update for python39","details":"This update for python39 fixes the following issues:\n\nUpdated to 3.9.24:\n  \n  - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)\n  - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the 'zipfile' module (bsc#1251305)\n","affected":[{"package":{"name":"python39","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/python39&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.24-150300.4.84.1"}]}],"ecosystem_specific":{"binaries":[{"libpython3_9-1_0":"3.9.24-150300.4.84.1","libpython3_9-1_0-32bit":"3.9.24-150300.4.84.1","python39":"3.9.24-150300.4.84.1","python39-32bit":"3.9.24-150300.4.84.1","python39-base":"3.9.24-150300.4.84.1","python39-base-32bit":"3.9.24-150300.4.84.1","python39-curses":"3.9.24-150300.4.84.1","python39-dbm":"3.9.24-150300.4.84.1","python39-devel":"3.9.24-150300.4.84.1","python39-doc":"3.9.24-150300.4.84.1","python39-doc-devhelp":"3.9.24-150300.4.84.1","python39-idle":"3.9.24-150300.4.84.1","python39-testsuite":"3.9.24-150300.4.84.1","python39-tk":"3.9.24-150300.4.84.1","python39-tools":"3.9.24-150300.4.84.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4221-1.json"}},{"package":{"name":"python39-core","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/python39-core&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.24-150300.4.84.1"}]}],"ecosystem_specific":{"binaries":[{"libpython3_9-1_0":"3.9.24-150300.4.84.1","libpython3_9-1_0-32bit":"3.9.24-150300.4.84.1","python39":"3.9.24-150300.4.84.1","python39-32bit":"3.9.24-150300.4.84.1","python39-base":"3.9.24-150300.4.84.1","python39-base-32bit":"3.9.24-150300.4.84.1","python39-curses":"3.9.24-150300.4.84.1","python39-dbm":"3.9.24-150300.4.84.1","python39-devel":"3.9.24-150300.4.84.1","python39-doc":"3.9.24-150300.4.84.1","python39-doc-devhelp":"3.9.24-150300.4.84.1","python39-idle":"3.9.24-150300.4.84.1","python39-testsuite":"3.9.24-150300.4.84.1","python39-tk":"3.9.24-150300.4.84.1","python39-tools":"3.9.24-150300.4.84.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4221-1.json"}},{"package":{"name":"python39-documentation","ecosystem":"openSUSE:Leap 15.6","purl":"pkg:rpm/opensuse/python39-documentation&distro=openSUSE%20Leap%2015.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.24-150300.4.84.1"}]}],"ecosystem_specific":{"binaries":[{"libpython3_9-1_0":"3.9.24-150300.4.84.1","libpython3_9-1_0-32bit":"3.9.24-150300.4.84.1","python39":"3.9.24-150300.4.84.1","python39-32bit":"3.9.24-150300.4.84.1","python39-base":"3.9.24-150300.4.84.1","python39-base-32bit":"3.9.24-150300.4.84.1","python39-curses":"3.9.24-150300.4.84.1","python39-dbm":"3.9.24-150300.4.84.1","python39-devel":"3.9.24-150300.4.84.1","python39-doc":"3.9.24-150300.4.84.1","python39-doc-devhelp":"3.9.24-150300.4.84.1","python39-idle":"3.9.24-150300.4.84.1","python39-testsuite":"3.9.24-150300.4.84.1","python39-tk":"3.9.24-150300.4.84.1","python39-tools":"3.9.24-150300.4.84.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4221-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254221-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1251305"},{"type":"REPORT","url":"https://bugzilla.suse.com/1252974"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-6075"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-8291"}]}