> USN-7886-1: Python vulnerabilities

[SOURCE] Ubuntu Security Notices [DATE: 24/11/2025 14:53] [LANGUAGE: EN]

It was discovered that Python inefficiently handled expanding system
environment variables. An attacker could possibly use this issue to cause
Python to consume excessive resources, leading to a denial of service.
(CVE-2025-6075)

Caleb Brown discovered that Python incorrectly handled the ZIP64 End of
Central Directory (EOCD) Locator record offset value. An attacker could
possibly use this issue to obfuscate malicious content. (CVE-2025-8291)

[messages.read_original_source] →