CVE-2025-69228 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-69228 Interim 1 1 2026-03-05T00:20:55Z current 2026-03-05T00:20:55Z 2026-03-05T00:20:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-69228 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a request to be crafted in such a way that an AIOHTTP server's memory fills up uncontrollably during processing. If an application includes a handler that uses the Request.post() method, an attacker may be able to freeze the server by exhausting the memory. This issue is fixed in version 3.13.3. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2026-February/024346.html E-Mail link for SUSE-SU-2026:20425-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 openSUSE Leap 15.6 openSUSE Leap 16.0 openSUSE Tumbleweed openssh-9.6p1-3.1 openssh-clients-9.6p1-3.1 openssh-common-9.6p1-3.1 openssh-server-9.6p1-3.1 python-aiohttp python3-aiohttp python3-aiohttp-3.6.0-150100.3.32.1 python311-aiohttp python311-aiohttp-3.13.3-1.1 python311-aiohttp-3.9.3-150400.10.36.1 python312-aiohttp-3.13.3-1.1 python313-Brotli-1.1.0-160000.3.1 python313-aiohttp python313-aiohttp-3.11.16-160000.3.1 python313-aiohttp-3.13.3-1.1 openssh-9.6p1-3.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6 openssh-clients-9.6p1-3.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6 openssh-common-9.6p1-3.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6 openssh-server-9.6p1-3.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6 openssh-9.6p1-3.1 as a component of Image SLE-Micro openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro openssh-common-9.6p1-3.1 as a component of Image SLE-Micro openssh-server-9.6p1-3.1 as a component of Image SLE-Micro openssh-9.6p1-3.1 as a component of Image SLE-Micro-Azure openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-Azure openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-Azure openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-Azure openssh-9.6p1-3.1 as a component of Image SLE-Micro-BYOS openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-BYOS openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-BYOS openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-BYOS openssh-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-Azure openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-Azure openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-Azure openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-Azure openssh-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-EC2 openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-EC2 openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-EC2 openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-EC2 openssh-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-GCE openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-GCE openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-GCE openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-BYOS-GCE openssh-9.6p1-3.1 as a component of Image SLE-Micro-EC2 openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-EC2 openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-EC2 openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-EC2 openssh-9.6p1-3.1 as a component of Image SLE-Micro-GCE openssh-clients-9.6p1-3.1 as a component of Image SLE-Micro-GCE openssh-common-9.6p1-3.1 as a component of Image SLE-Micro-GCE openssh-server-9.6p1-3.1 as a component of Image SLE-Micro-GCE python313-Brotli-1.1.0-160000.3.1 as a component of SUSE Linux Enterprise Server 16.0 python313-aiohttp-3.11.16-160000.3.1 as a component of SUSE Linux Enterprise Server 16.0 python313-Brotli-1.1.0-160000.3.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python313-aiohttp-3.11.16-160000.3.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python313-Brotli-1.1.0-160000.3.1 as a component of openSUSE Leap 16.0 python313-aiohttp-3.11.16-160000.3.1 as a component of openSUSE Leap 16.0 python311-aiohttp-3.13.3-1.1 as a component of openSUSE Tumbleweed python312-aiohttp-3.13.3-1.1 as a component of openSUSE Tumbleweed python313-aiohttp-3.13.3-1.1 as a component of openSUSE Tumbleweed python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python3-aiohttp-3.6.0-150100.3.32.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python3-aiohttp-3.6.0-150100.3.32.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 python3-aiohttp-3.6.0-150100.3.32.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 python3-aiohttp-3.6.0-150100.3.32.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python3-aiohttp-3.6.0-150100.3.32.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python313-Brotli-1.1.0-160000.3.1 as a component of SUSE Linux Enterprise Server 16.0 python313-aiohttp-3.11.16-160000.3.1 as a component of SUSE Linux Enterprise Server 16.0 python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python311-aiohttp-3.9.3-150400.10.36.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python311-aiohttp-3.9.3-150400.10.36.1 as a component of openSUSE Leap 15.6 python311-aiohttp as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python-aiohttp as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python311-aiohttp as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python-aiohttp as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python3-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python311-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python3-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 python-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 python3-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 python-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 python311-aiohttp as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python-aiohttp as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python311-aiohttp as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python-aiohttp as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python311-aiohttp as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python-aiohttp as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python311-aiohttp as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python-aiohttp as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python313-aiohttp as a component of SUSE Linux Enterprise Server 16.0 python-aiohttp as a component of SUSE Linux Enterprise Server 16.0 python-aiohttp as a component of SUSE Linux Enterprise Server Teradata 15 SP4 python311-aiohttp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python-aiohttp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python311-aiohttp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python-aiohttp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python311-aiohttp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python-aiohttp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python313-aiohttp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python-aiohttp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python311-aiohttp as a component of openSUSE Leap 15.6 python-aiohttp as a component of openSUSE Leap 15.6 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a request to be crafted in such a way that an AIOHTTP server's memory fills up uncontrollably during processing. If an application includes a handler that uses the Request.post() method, an attacker may be able to freeze the server by exhausting the memory. This issue is fixed in version 3.13.3. CVE-2025-69228 Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6:openssh-9.6p1-3.1 Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6:openssh-clients-9.6p1-3.1 Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6:openssh-common-9.6p1-3.1 Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.6:openssh-server-9.6p1-3.1 Image SLE-Micro:openssh-9.6p1-3.1 Image SLE-Micro:openssh-clients-9.6p1-3.1 Image SLE-Micro:openssh-common-9.6p1-3.1 Image SLE-Micro:openssh-server-9.6p1-3.1 Image SLE-Micro-Azure:openssh-9.6p1-3.1 Image SLE-Micro-Azure:openssh-clients-9.6p1-3.1 Image SLE-Micro-Azure:openssh-common-9.6p1-3.1 Image SLE-Micro-Azure:openssh-server-9.6p1-3.1 Image SLE-Micro-BYOS:openssh-9.6p1-3.1 Image SLE-Micro-BYOS:openssh-clients-9.6p1-3.1 Image SLE-Micro-BYOS:openssh-common-9.6p1-3.1 Image SLE-Micro-BYOS:openssh-server-9.6p1-3.1 Image SLE-Micro-BYOS-Azure:openssh-9.6p1-3.1 Image SLE-Micro-BYOS-Azure:openssh-clients-9.6p1-3.1 Image SLE-Micro-BYOS-Azure:openssh-common-9.6p1-3.1 Image SLE-Micro-BYOS-Azure:openssh-server-9.6p1-3.1 Image SLE-Micro-BYOS-EC2:openssh-9.6p1-3.1 Image SLE-Micro-BYOS-EC2:openssh-clients-9.6p1-3.1 Image SLE-Micro-BYOS-EC2:openssh-common-9.6p1-3.1 Image SLE-Micro-BYOS-EC2:openssh-server-9.6p1-3.1 Image SLE-Micro-BYOS-GCE:openssh-9.6p1-3.1 Image SLE-Micro-BYOS-GCE:openssh-clients-9.6p1-3.1 Image SLE-Micro-BYOS-GCE:openssh-common-9.6p1-3.1 Image SLE-Micro-BYOS-GCE:openssh-server-9.6p1-3.1 Image SLE-Micro-EC2:openssh-9.6p1-3.1 Image SLE-Micro-EC2:openssh-clients-9.6p1-3.1 Image SLE-Micro-EC2:openssh-common-9.6p1-3.1 Image SLE-Micro-EC2:openssh-server-9.6p1-3.1 Image SLE-Micro-GCE:openssh-9.6p1-3.1 Image SLE-Micro-GCE:openssh-clients-9.6p1-3.1 Image SLE-Micro-GCE:openssh-common-9.6p1-3.1 Image SLE-Micro-GCE:openssh-server-9.6p1-3.1 SUSE Linux Enterprise Server 16.0:python313-Brotli-1.1.0-160000.3.1 SUSE Linux Enterprise Server 16.0:python313-aiohttp-3.11.16-160000.3.1 SUSE Linux Enterprise Server for SAP applications 16.0:python313-Brotli-1.1.0-160000.3.1 SUSE Linux Enterprise Server for SAP applications 16.0:python313-aiohttp-3.11.16-160000.3.1 openSUSE Leap 16.0:python313-Brotli-1.1.0-160000.3.1 openSUSE Leap 16.0:python313-aiohttp-3.11.16-160000.3.1 openSUSE Tumbleweed:python311-aiohttp-3.13.3-1.1 openSUSE Tumbleweed:python312-aiohttp-3.13.3-1.1 openSUSE Tumbleweed:python313-aiohttp-3.13.3-1.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Module for Public Cloud 15 SP4:python3-aiohttp-3.6.0-150100.3.32.1 SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Module for Public Cloud 15 SP5:python3-aiohttp-3.6.0-150100.3.32.1 SUSE Linux Enterprise Module for Public Cloud 15 SP6:python3-aiohttp-3.6.0-150100.3.32.1 SUSE Linux Enterprise Module for Public Cloud 15 SP7:python3-aiohttp-3.6.0-150100.3.32.1 SUSE Linux Enterprise Module for Python 3 15 SP7:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server 15 SP4-LTSS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python3-aiohttp-3.6.0-150100.3.32.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server 15 SP5-LTSS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server 15 SP6-LTSS:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server 16.0:python313-Brotli-1.1.0-160000.3.1 SUSE Linux Enterprise Server 16.0:python313-aiohttp-3.11.16-160000.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:python311-aiohttp-3.9.3-150400.10.36.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:python311-aiohttp-3.9.3-150400.10.36.1 openSUSE Leap 15.6:python311-aiohttp-3.9.3-150400.10.36.1 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H