Security update for python39 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4433-1 Final 1 1 2025-12-17T13:20:25Z current 2025-12-17T13:20:25Z 2025-12-17T13:20:25Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python39 This update for python39 fixes the following issues: * Update to 3.9.25: - Security - gh-137836: Add support of the “plaintext” element, RAWTEXT elements “xmp”, “iframe”, “noembed” and “noframes”, and optionally RAWTEXT element “noscript” in html.parser.HTMLParser. - gh-136063: email.message: ensure linear complexity for legacy HTTP parameters parsing. Patch by Bénédikt Tran. - Library - gh-98793: Fix argument typechecks in _overlapped.WSAConnect() and _overlapped.Overlapped.WSASendTo() functions. bpo-44817: Ignore WinError 53 (ERROR_BAD_NETPATH), 65 (ERROR_NETWORK_ACCESS_DENIED) and 161 (ERROR_BAD_PATHNAME) when using ntpath.realpath(). - Core and Builtins - gh-120384: Fix an array out of bounds crash in list_ass_subscript, which could be invoked via some specificly tailored input: including concurrent modification of a list object, where one thread assigns a slice and another clears it. - gh-120298: Fix use-after free in list_richcompare_impl which can be invoked via some specificly tailored evil input. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-4433,openSUSE-SLE-15.6-2025-4433 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254433-1/ Link for SUSE-SU-2025:4433-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023582.html E-Mail link for SUSE-SU-2025:4433-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 15.6 libpython3_9-1_0-3.9.25-150300.4.87.1 libpython3_9-1_0-32bit-3.9.25-150300.4.87.1 libpython3_9-1_0-64bit-3.9.25-150300.4.87.1 python39-3.9.25-150300.4.87.1 python39-32bit-3.9.25-150300.4.87.1 python39-64bit-3.9.25-150300.4.87.1 python39-base-3.9.25-150300.4.87.1 python39-base-32bit-3.9.25-150300.4.87.1 python39-base-64bit-3.9.25-150300.4.87.1 python39-curses-3.9.25-150300.4.87.1 python39-dbm-3.9.25-150300.4.87.1 python39-devel-3.9.25-150300.4.87.1 python39-doc-3.9.25-150300.4.87.1 python39-doc-devhelp-3.9.25-150300.4.87.1 python39-idle-3.9.25-150300.4.87.1 python39-testsuite-3.9.25-150300.4.87.1 python39-tk-3.9.25-150300.4.87.1 python39-tools-3.9.25-150300.4.87.1 libpython3_9-1_0-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 libpython3_9-1_0-32bit-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-32bit-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-base-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-base-32bit-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-curses-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-dbm-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-devel-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-doc-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-doc-devhelp-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-idle-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-testsuite-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-tk-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6 python39-tools-3.9.25-150300.4.87.1 as a component of openSUSE Leap 15.6