ALT-PU-2024-6120: package python3-module-aiohttp update to version 3.9.1-alt1
Описание
This update upgrades python3-module-aiohttp to version 3.9.1-alt1.
Устраненные уязвимости6
Ссылки5
GHSA-6x4h-9622-fqr6
https://github.com/advisories/GHSA-6x4h-9622-fqr6GHSA-gfw2-4jvh-wgfg
https://github.com/advisories/GHSA-gfw2-4jvh-wgfgGHSA-q3qx-c6g2-7pw2
https://github.com/advisories/GHSA-q3qx-c6g2-7pw2GHSA-qvrw-v9rv-5rjx
https://github.com/advisories/GHSA-qvrw-v9rv-5rjxСвязанные уязвимости
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not using a prebuilt wheel). These bugs have been addressed in commit `d5c12ba89` which has been included in release version 3.8.6. Users are advised to upgrade. There are no known workarounds for these issues.
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not using a prebuilt wheel). These bugs have been addressed in commit `d5c12ba89` which has been included in release version 3.8.6. Users are advised to upgrade. There are no known workarounds for these issues.
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not using a prebuilt wheel). These bugs have been addressed in commit `d5c12ba89` which has been included in release version 3.8.6. Users are advised to upgrade. There are no known workarounds for these issues.