Description
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file) is not affected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.0 | python311 +1 | 3.11.8-3.1 | SUSE-SU-2025:20492-1, SUSE-SU-2025:20154-1, SUSE-SU-2025:20025-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python310 | 3.10.0rc1-4.2 | openSUSE-SU-2024:11283-1 |
| openSUSE Tumbleweed | python311 | 3.11.0b1-1.1 | openSUSE-SU-2024:12089-1 |
| openSUSE Tumbleweed | python312 | 3.12.0a7-1.1 | openSUSE-SU-2024:12910-1 |
| openSUSE Tumbleweed | python313 | 3.13.0~b3-1.1 | openSUSE-SU-2024:14109-1 |
| openSUSE Tumbleweed | python314 | 3.14.0~a1-1.1 | openSUSE-SU-2024:14434-1 |
| openSUSE Tumbleweed | python315 | 3.15.0~a1-1.1 | openSUSE-SU-2025:15713-1 |
| openSUSE Tumbleweed | python39 | 3.9.7-2.1 | openSUSE-SU-2024:11286-1 |
Advisories 12
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- openSUSE-SU-2025:15713-1 python315-3.15.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20154-1 Security update for python311 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20492-1 Security update for python311 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20025-1 Security update for python311, python-rpm-macros SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2024:14434-1 python314-3.14.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11286-1 python39-3.9.7-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12910-1 python312-3.12.0a7-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11283-1 python310-3.10.0rc1-4.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12089-1 python311-3.11.0b1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14109-1 python313-3.13.0~b3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025