File _patchinfo of Package patchinfo.39454

<patchinfo incident="39454">
  <issue tracker="bnc" id="1244401">IPv6 address parsing doesn't limit buffer size (Python 3.6 only)</issue>
  <issue tracker="bnc" id="1244705">VUL-0: CVE-2025-6069: python,python3,python310,python311,python312,python313,python36,python39: worst case quadratic complexity when processing certain cr
afted malformed inputs with HTMLParser</issue>         
  <issue tracker="bnc" id="1247249">VUL-0: CVE-2025-8194: python: cpython: tar archives with negative offsets may lead to infinite loop and deadlock</issue>
  <issue tracker="cve" id="2025-6069"/>
  <issue tracker="cve" id="2025-8194"/>
  <issue tracker="cve" id="2024-11168"/>
  <packager>mcepl</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for python3</summary>
  <description>This update for python3 fixes the following issues:

- CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705)
- CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249)

Other fixes:
- Limit buffer size for IPv6 address parsing (bsc#1244401).                                                      
</description>
</patchinfo>