Msrc Azl3 Python3 3.12.9-5 On Azure Linux 3.0 vulnerabilities

CVE-2025-13837 [LOW] CWE-400 Out-of-memory when loading Plist Out-of-memory when loading Plist Mariner: Mariner PSF: PSF Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-13836 [MEDIUM] CWE-400 Excessive read buffering DoS in http.client Excessive read buffering DoS in http.client Mariner: Mariner PSF: PSF Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-8291 [MEDIUM] ZIP64 End of Central Directory (EOCD) Locator record offset not checked ZIP64 End of Central Directory (EOCD) Locator record offset not checked FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sour

CVE-2025-6075 [LOW] CWE-400 Quadratic complexity in os.path.expandvars() with user-controlled template Quadratic complexity in os.path.expandvars() with user-controlled template FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of th

CVE-2023-27043 [MEDIUM] CWE-20 The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In s The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in w