Back Linuxsecurity

openSUSE Leap 15.6 python

Linuxsecurity •LinuxSecurity Advisories • March 10, 2026

This update for python-aiohttp fixes the following issues: * CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). * CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020). * CVE-2025-69224: Fixed unicode processing of header values could cause parsing discrepancies (bsc#1256018). * CVE-2025-69223: Fixed aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb (bsc#1256017). * CVE-2025-69227: Fixed DoS when bypassing asserts (bsc#1256021). * CVE-2025-69225: Fixed unicode match groups in regexes for ASCII protocol elements (bsc#1256019). * CVE-2025-69229: Fixed DoS through chunked messages (bsc#1256023).

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-858=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-858=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-858=1 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-858=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-858=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-858=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-858=1 * SUSE Linux Enterprise High Performance Read the Full Advisory

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-858=1

zypper in -t patch openSUSE-SLE-15.6-2026-858=1

* Public Cloud Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-858=1

* Python 3 Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-858=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-858=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-858=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-858=1

* SUSE Linux Enterprise High Performance

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-aiohttp-debuginfo-3.9.3-150400.10.36.1 * python311-aiohttp-3.9.3-150400.10.36.1 * python-aiohttp-debugsource-3.9.3-150400.10.36.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.36.1 * python311-aiohttp-3.9.3-150400.10.36.1 * python-aiohttp-debugsource-3.9.3-150400.10.36.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-3.9.3-150400.10.36.1 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.36.1 * python311-aiohttp-3.9.3-150400.10.36.1 * python-aiohttp-debugsource-3.9.3-150400.10.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-aiohttp-debuginfo-3.9.3-150400.10.36.1 * python311-aiohttp-3.9.3-150400.10.36.1 * python-aiohttp-debugsource-3.9.3-150400.10.36.1 * SUSE Linux Read the Full Advisory

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

* python311-aiohttp-debuginfo-3.9.3-150400.10.36.1