gpp_maybe Security update for python-aiohttp

SUSE-SLE-Module-Public-Cloud-15-SP4-2026-859

This update for python-aiohttp fixes the following issues: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020). - CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018). - CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017). - CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021). - CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019). - CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).

• Release Date
  Mar 10 2026
• References
  Bugzilla: 1254867, 1256022, 1256020, 1256018, 1256017, 1256021, 1256019, 1256023
  CVEs: CVE-2025-69223, CVE-2025-69228, CVE-2025-69224, CVE-2025-69225, CVE-2025-69226, CVE-2025-69227, CVE-2025-69229
• Type
  security
• Severity
  important

cloud_download Downloads

Public Cloud Module 15.4 s390x

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock src

  python3-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock rpm

Public Cloud Module 15.4 aarch64

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock src

  python3-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock rpm

Public Cloud Module 15.4 ppc64le

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock src

  python3-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock rpm

Public Cloud Module 15.4 x86_64

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock src

  python3-aiohttp
  Asynchronous HTTP client/server framework

  3.6.0-150100.3.32.1 lock rpm