ALT-PU-2026-1250: package python3-module-aiohttp update to version 3.13.3-alt0.p11.1
Источник
errata.altlinux.org
Дата публикации
18.02.2026
Дата обновления
28.05.2026
Устраненные уязвимости
16
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
Описание
This update upgrades python3-module-aiohttp to version 3.13.3-alt0.p11.1.
Устраненные уязвимости16
Ссылки9
GHSA-54jq-c3m8-4m76
https://github.com/advisories/GHSA-54jq-c3m8-4m76GHSA-69f9-5gxw-wvc2
https://github.com/advisories/GHSA-69f9-5gxw-wvc2GHSA-6jhg-hg63-jvvf
https://github.com/advisories/GHSA-6jhg-hg63-jvvfGHSA-6mq8-rvhq-8wgg
https://github.com/advisories/GHSA-6mq8-rvhq-8wggGHSA-fh55-r93g-j68g
https://github.com/advisories/GHSA-fh55-r93g-j68gGHSA-g84x-mcqj-x9qq
https://github.com/advisories/GHSA-g84x-mcqj-x9qqGHSA-jj3x-wxrx-4x23
https://github.com/advisories/GHSA-jj3x-wxrx-4x23GHSA-mqqc-3gqh-h2x8
https://github.com/advisories/GHSA-mqqc-3gqh-h2x8Связанные уязвимости
oracle-oval
19 дней назад
ELSA-2026-604898: python-oci-sdk security update (IMPORTANT)
CVSS3: 7.5
ubuntu
10 месяцев назад
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.