gpp_maybe Security update for python-aiohttp

SUSE-SLE-Module-Python3-15-SP7-2026-858

This update for python-aiohttp fixes the following issues: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020). - CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018). - CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017). - CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021). - CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019). - CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).

• Release Date
  Mar 10 2026
• References
  Bugzilla: 1256022, 1256019, 1256018, 1256017, 1256021, 1256020, 1256023
  CVEs: CVE-2025-69223, CVE-2025-69228, CVE-2025-69224, CVE-2025-69227, CVE-2025-69226, CVE-2025-69229, CVE-2025-69225
• Type
  security
• Severity
  important

cloud_download Downloads

Python 3 Module 15.7 ppc64le

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock src

  python311-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock rpm

Python 3 Module 15.7 aarch64

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock src

  python311-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock rpm

Python 3 Module 15.7 s390x

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock src

  python311-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock rpm

Python 3 Module 15.7 x86_64

• Packages
  python-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock src

  python311-aiohttp
  Asynchronous HTTP client/server framework

  3.9.3-150400.10.36.1 lock rpm