Multiple security vulnerabilities affecting the Python 3 standard library were addressed in version 3.11.6-43.oe2403sp1. Notably, the urllib.request module's HTTPPasswordMgr classes improperly matched credentials across URL schemes, risking credential leakage via HTTP downgrade attacks. The stringprep module mishandled certain Unicode characters affecting domain name processing. The csv.Sniffer.sniff() method could be exploited with crafted CSV input to cause excessive CPU usage. The tarfile module had several issues allowing directory creation outside extraction targets and potential file permission or content exposure via crafted archives. These vulnerabilities affect POSIX platforms primarily and are fixed in the specified patched version.