File _patchinfo of Package patchinfo.39547

<patchinfo incident="39547">
  <issue tracker="cve" id="2025-4435"/>
  <issue tracker="bnc" id="1244061">VUL-0: CVE-2025-4435: python: Tarfile extracts filtered members when errorlevel=0</issue>
  <issue tracker="cve" id="2025-6069"/>
  <issue tracker="bnc" id="1244705">VUL-0: CVE-2025-6069: python,python3,python310,python311,python312,python313,python36,python39: worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser</issue>
  <issue tracker="cve" id="2025-8194"/>
  <issue tracker="bnc" id="1247249">VUL-0: CVE-2025-8194: python: cpython: tar archives with negative offsets may lead to infinite loop and deadlock</issue>
  <packager>mcepl</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for python311</summary>
  <description>This update for python311 fixes the following issues:

- CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).
- CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705).
- CVE-2025-4435: Fixed Tarfile extracting filtered members when errorlevel=0 (bsc#1244061).
  </description>
</patchinfo>