File _patchinfo of Package patchinfo.39812

<patchinfo incident="39812">
  <issue tracker="cve" id="2025-8194"/>
  <issue tracker="bnc" id="1247249">VUL-0: CVE-2025-8194: python: cpython: tar archives with negative offsets may lead to infinite loop and deadlock</issue>
  <issue tracker="cve" id="2025-6069"/>
  <issue tracker="bnc" id="1244705">VUL-0: CVE-2025-6069: python,python3,python310,python311,python312,python313,python36,python39: worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser</issue>
  <packager>mcepl</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for python</summary>
  <description>This update for python fixes the following issues:

- CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).
- CVE-2025-6069: Fixed worst case quadratic complexity that can lead to amplified DoS. (bsc#1244705)
</description>
</patchinfo>

openSUSE Build Service is sponsored by