Amazon Linux 2023: CVE-2025-6075: Low priority package update for python3.9 (Multiple Advisories)

If the value passed to os.path.expandvars() is user-controlled a
performance degradation is possible when expanding environment
variables.
A vulnerability in Python’s os.path.expandvars() function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denial of service (DoS) conditions. No code execution or data exposure occurs, so the impact is limited to performance slowdown.