Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2026:0027-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:0027-1

UNKNOWN

Security update for python3

Published Jan 5, 2026

Modified 1 weeks ago

Fix available

Details

This update for python3 fixes the following issues:

CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997)
CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400)
CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401)

Affected Packages

SUSE:Linux Enterprise Micro 5.2libpython3_6m1_0

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.2python3

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.2python3-base

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.2python3-core

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.3libpython3_6m1_0

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.3python3

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.3python3-base

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.3python3-core

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.4libpython3_6m1_0

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.4python3

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.4python3-base

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.4python3-core

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.5libpython3_6m1_0

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.5python3

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.5python3-base

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Micro 5.5python3-core

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7libpython3_6m1_0

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-base

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-core

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-curses

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-dbm

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-devel

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-idle

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7python3-tk

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Development Tools 15 SP7python3-core

Fixed in:

3.6.15-150300.10.103.1

SUSE:Linux Enterprise Module for Development Tools 15 SP7python3-tools

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6libpython3_6m1_0

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6libpython3_6m1_0-32bit

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-base

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-core

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-curses

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-dbm

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-devel

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-doc

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-doc-devhelp

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-documentation

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-idle

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-testsuite

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-tk

Fixed in:

3.6.15-150300.10.103.1

openSUSE:Leap 15.6python3-tools

Fixed in:

3.6.15-150300.10.103.1

References

REPORThttps://bugzilla.suse.com/1254400 REPORThttps://bugzilla.suse.com/1254401 REPORThttps://bugzilla.suse.com/1254997 WEBhttps://www.suse.com/security/cve/CVE-2025-12084 WEBhttps://www.suse.com/security/cve/CVE-2025-13836 WEBhttps://www.suse.com/security/cve/CVE-2025-13837 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260027-1/

Upstream

CVE-2025-12084 CVE-2025-13836 CVE-2025-13837

Related

CVE-2025-12084 CVE-2025-13836 CVE-2025-13837

Ecosystems

SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 openSUSE Leap 15.6

Timeline

PublishedJan 5, 2026

ModifiedJan 5, 2026