Back Linuxsecurity

openSUSE Leap 15.6: python312 Moderate Availability Issues 2026:0025

Linuxsecurity •LinuxSecurity Advisories • January 5, 2026

This update for python312 fixes the following issues: * CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested documents (bsc#1254997). * CVE-2025-13836: use of `Content-Length` by default when reading an HTTP response with no read amount specified can lead to OOM issues and DoS when a client deals with a malicious server (bsc#1254400). * CVE-2025-13837: data read by the plistlib module according to the size specified by the file itself can lead to OOM issues and DoS (bsc#1254401).

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-25=1 openSUSE-SLE-15.6-2026-25=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-25=1 openSUSE-SLE-15.6-2026-25=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python312-core-debugsource-3.12.12-150600.3.40.1 * python312-devel-3.12.12-150600.3.40.1 * python312-dbm-debuginfo-3.12.12-150600.3.40.1 * libpython3_12-1_0-debuginfo-3.12.12-150600.3.40.1 * python312-tk-3.12.12-150600.3.40.1 * python312-doc-devhelp-3.12.12-150600.3.40.1 * python312-debuginfo-3.12.12-150600.3.40.1 * python312-base-debuginfo-3.12.12-150600.3.40.1 * python312-debugsource-3.12.12-150600.3.40.1 * python312-testsuite-3.12.12-150600.3.40.1 * python312-testsuite-debuginfo-3.12.12-150600.3.40.1 * python312-tk-debuginfo-3.12.12-150600.3.40.1 * python312-dbm-3.12.12-150600.3.40.1 * python312-doc-3.12.12-150600.3.40.1 * python312-curses-3.12.12-150600.3.40.1 * libpython3_12-1_0-3.12.12-150600.3.40.1 * python312-idle-3.12.12-150600.3.40.1 * python312-base-3.12.12-150600.3.40.1 * python312-3.12.12-150600.3.40.1 * Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)

* python312-core-debugsource-3.12.12-150600.3.40.1

* python312-devel-3.12.12-150600.3.40.1

* python312-dbm-debuginfo-3.12.12-150600.3.40.1

* libpython3_12-1_0-debuginfo-3.12.12-150600.3.40.1

* python312-tk-3.12.12-150600.3.40.1

* python312-doc-devhelp-3.12.12-150600.3.40.1

* python312-debuginfo-3.12.12-150600.3.40.1

* python312-base-debuginfo-3.12.12-150600.3.40.1

* python312-debugsource-3.12.12-150600.3.40.1

* python312-testsuite-3.12.12-150600.3.40.1

* python312-testsuite-debuginfo-3.12.12-150600.3.40.1

* python312-tk-debuginfo-3.12.12-150600.3.40.1

* python312-dbm-3.12.12-150600.3.40.1

* python312-doc-3.12.12-150600.3.40.1

* python312-curses-3.12.12-150600.3.40.1

* libpython3_12-1_0-3.12.12-150600.3.40.1

* python312-idle-3.12.12-150600.3.40.1

* python312-base-3.12.12-150600.3.40.1

* python312-3.12.12-150600.3.40.1

* bsc#1254400 * bsc#1254401 * bsc#1254997 ## References: * * * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

openSUSE Python Updates Address DoS Vulnerabilities openSUSE has released updates for python312 and python313 to address multiple vulnerabilities that could lead to Denial of Service (DoS) conditions. Key issues include quadratic complexity in XML processing and improper handling of HTTP responses, which could result in out-of-memory (OOM) issues when interacting with malicious servers. Affected versions are python312 and python313. 3 sources 35

Extracted Entities

openSUSE Leap 15.6: python312 Moderate Availability Issues 2026:0025

The full story

Extracted Entities

Attack Types (1)

CVEs (3)

Platforms (1)