File _patchinfo of Package patchinfo.42333
<patchinfo incident="42333"> <issue tracker="cve" id="2025-12084"/> <issue tracker="cve" id="2025-13836"/> <issue tracker="cve" id="2025-6075"/> <issue tracker="bnc" id="1254997">VUL-0: CVE-2025-12084: python,python3,python310,python311,python312,python313,python36,python39: cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service</issue> <issue tracker="bnc" id="1254400">VUL-0: CVE-2025-13836: python,python3,python310,python311,python312,python313,python36,python39: When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length.</issue> <packager>mcepl</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for python</summary> <description>This update for python fixes the following issues: - CVE-2025-13836: Fixed reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length (bsc#1254400) - CVE-2025-12084: Fixed Denial of Service due to quadratic algorithm in xml.dom.minidom (bsc#1254997). </description> </patchinfo>