Fedora 39: python-aiohttp 2024-f83b123d63 Security Advisory Updates
Summary
Python HTTP client/server for asyncio which supports both the client and the
server side of the HTTP protocol, client and server websocket, and webservers
with middlewares and pluggable routing.
Update Information:
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
Change Log
* Thu Apr 11 2024 Benjamin A. Beasley - 3.9.3-3
- Backport support for llhttp 9.2.1
- Started rejecting obsolete line folding in Python parser to match
* Fri Feb 16 2024 Benjamin A. Beasley
- 3.9.3-2
- Rebuilt for llhttp-9.2.0
References
[ 1 ] Bug #2273352 - llhttp-9.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2273352
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-f83b123d63' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label