The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02049-1 advisory.

    python311 was updated from version 3.11.10 to 3.11.13:

    - Security issues fixed:

      * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS     (bsc#1243273).
      * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed     tarfile         extraction filters to be bypassed using crafted symlinks and hard links         (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032)

    - Other bugs fixed:

      * Improved handling of system call failures that OpenSSL reports (bsc#1241067)
      * Disable GC during thread operations to prevent deadlocks.
      * Fixed a potential denial of service vulnerability in the imaplib module.
      * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when     flattening an         email message using a modern email policy.
      * Fixed parsing long IPv6 addresses with embedded IPv4 address.
      * Fixed ipaddress.IPv6Address.reverse_pointer output according to RFC 3596.
      * Improved the textual representation of IPv4-mapped IPv6 addresses in ipaddress.
      * ipaddress: fixed hash collisions for IPv4Network and IPv6Network objects
      * os.path.realpath() now accepts a strict keyword-only argument.
      * Stop the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption     and a minor         denial-of-service.
      * Updated bundled libexpat to 2.7.1
      * Writers of CPython documentation can now use next as the version for the versionchanged, versionadded,         deprecated directives.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : python311 (SUSE-SU-2025:02049-1)

critical Nessus Plugin ID 240606

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Jul 9, 2025, 1:33 AM IAVM reference (un-supersede a handful of incorrectly superseded IAVM references) Plugin Feed: 202507090133
Version 1.4 Jul 1, 2025, 1:15 AM IAVM reference Plugin Feed: 202507010115
Version 1.3 Jun 27, 2025, 8:01 PM Metadata (Add IAVM references) Plugin Feed: 202506272001
Version 1.2 Jun 26, 2025, 6:00 PM Detection (updated detection logic) Plugin Feed: 202506261800
Version 1.1 Jun 26, 2025, 10:02 AM New Plugin Feed: 202506261002