Package: python-aiohttp / 3.8.4-1+deb12u1

Metadata

Package Version Patches format
python-aiohttp 3.8.4-1+deb12u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0002 Use local install of jquery.patch | (download)

examples/websocket.html | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 use local install of jquery


0002 Add shebang to examples.patch | (download)

examples/lowlevel_srv.py | 1 1 + 0 - 0 !
examples/server_simple.py | 1 1 + 0 - 0 !
2 files changed, 2 insertions(+)

 add shebang to examples


0003 remove forkme button from docs to prevent privacy br.patch | (download)

docs/conf.py | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 remove forkme button from docs to prevent privacy breach


0004 remove sphinxcontrib.towncrier for now.patch | (download)

docs/changes.rst | 9 1 + 8 - 0 !
docs/conf.py | 2 1 + 1 - 0 !
docs/index.rst | 2 1 + 1 - 0 !
3 files changed, 3 insertions(+), 10 deletions(-)

 remove sphinxcontrib.towncrier for now

not packaged in Debian yet

CVE 2024 30251.patch | (download)

aiohttp/formdata.py | 12 11 + 1 - 0 !
aiohttp/multipart.py | 128 87 + 41 - 0 !
tests/test_client_functional.py | 44 1 + 43 - 0 !
tests/test_multipart.py | 87 74 + 13 - 0 !
tests/test_web_functional.py | 27 5 + 22 - 0 !
5 files changed, 178 insertions(+), 120 deletions(-)

 [patch] [pr #8335/5a6949da backport][3.9] add content-disposition
 automatically (#8336)


CVE 2023 47627.patch | (download)

aiohttp/http_parser.py | 84 49 + 35 - 0 !
tests/test_http_parser.py | 86 82 + 4 - 0 !
2 files changed, 131 insertions(+), 39 deletions(-)

 [patch] [pr #7661/85713a48 backport][3.8] update python parser for
 RFCs 9110/9112 (#7662)


CVE 2024 52304.patch | (download)

aiohttp/http_parser.py | 7 7 + 0 - 0 !
tests/test_http_parser.py | 48 48 + 0 - 0 !
2 files changed, 55 insertions(+)

 [patch] [pr #9851/541d86d backport][3.10] fix incorrect parsing of
 chunk extensions with the pure Python parser (#9853)


CVE 2024 23334.patch | (download)

aiohttp/web_urldispatcher.py | 18 14 + 4 - 0 !
docs/web_advanced.rst | 16 13 + 3 - 0 !
docs/web_reference.rst | 12 9 + 3 - 0 !
tests/test_web_urldispatcher.py | 91 91 + 0 - 0 !
4 files changed, 127 insertions(+), 10 deletions(-)

 [patch] [pr #8079/1c335944 backport][3.9] validate static paths
 (#8080)


CVE 2023 49082.patch | (download)

aiohttp/http_parser.py | 6 4 + 2 - 0 !
tests/test_http_parser.py | 9 8 + 1 - 0 !
2 files changed, 12 insertions(+), 3 deletions(-)

 [patch] backport 493f06797654c383242f0e8007f6e06b818a1fbc to 3.9
 (#7730)


CVE 2023 49081.patch | (download)

aiohttp/client_reqrep.py | 4 2 + 2 - 0 !
tests/test_client_request.py | 20 17 + 3 - 0 !
2 files changed, 19 insertions(+), 5 deletions(-)

 [patch] disallow arbitrary sequence types in version (#7835) (#7836)


CVE 2024 23334 2.patch | (download)

tests/test_web_urldispatcher.py | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

---