< back to search

shield Security update for python-aiohttp

SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4113

This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure (bsc#1273553).

Release Date

Sep 9 2026
References

Bugzilla: 1273125, 1273553
CVEs: CVE-2026-59881, CVE-2026-69243
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Public Cloud Module 15.6 s390x

Packages

python-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock src

python3-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock rpm

Public Cloud Module 15.6 ppc64le

Packages

python-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock src

python3-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock rpm

Public Cloud Module 15.6 x86_64

Packages

python-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock src

python3-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock rpm

Public Cloud Module 15.6 aarch64

Packages

python-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock src

python3-aiohttp
Asynchronous HTTP client/server framework

3.6.0-150100.3.41.1 lock rpm