Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

SUSE python-aiohttp Important Resource Consumption Issues Vuln 2026-3208-1

suse
Calendar Grey July 23, 2026
Scroller Suse
Update for python-aiohttp addresses eight key issues, enhancing stability and security on SUSE distributions.
A security update for python-aiohttp addresses eight vulnerabilities affecting various SUSE products, enhancing system security and preventing potential denial of service and resou...

Summary

## This update for python-aiohttp fixes the following issues: * CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers (bsc#1268398). * CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead to excessive resource consumption (bsc#1268543). * CVE-2026-54274: incomplete websocket frame payloads can bypass memory use limits and cause a DoS via excessive resource consumption (bsc#1268544). * CVE-2026-54275: `server_hostname` TLS SNI check bypass when an existing connection is reused (bsc#1268549). * CVE-2026-54277: `max_line_size` bypass when using the optimised C HTTP parser can lead to excessive resource consumption (bsc#1268556). * CVE-2026-54278: unread compressed request bodies can bypass

Topics%20covered

Topics Covered

security advisory SuSE DoS important resource consumption python-aiohttp

References

* bsc#1268398

* bsc#1268543

* bsc#1268544

* bsc#1268549

* bsc#1268556

* bsc#1268559

* bsc#1268560

* bsc#1268561

Cross-

* CVE-2026-50269

* CVE-2026-54273

* CVE-2026-54274

* CVE-2026-54275

* CVE-2026-54277

* CVE-2026-54278

* CVE-2026-54279

* CVE-2026-54280

CVSS scores:

* CVE-2026-50269 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

* CVE-2026-50269 ( NVD ): 2.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2026-50269 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-54273 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-54273 ( NVD ): 6.6

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3208-1
Release Date: 2026-07-23T14:11:28Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE DoS important resource consumption python-aiohttp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.