Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 37 Release: Critical llhttp Update for CVE-2023-30589 Fix

fedora
Calendar Grey August 17, 2023
Dist Fedora Esm H88
Major revision to llhttp and python-aiohttp for Fedora 37, responding to CVE-2023-30589 with crucial patches.
Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break, and `python-aiohttp` to 3.8.5

Summary

This project is a port of http_parser to TypeScript. llparse is used to

generate the output C source file, which could be compiled and linked with the

embedder's program (like Node.js).

This copy of the library is compiled with LLHTTP_STRICT_MODE set to 0

(disabled), which is the default.

Update Information:

Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break, and `python-aiohttp` to 3.8.5. Fixes CVE-2023-30589.

Topics%20covered

Topics Covered

security advisory update critical Fedora CVE fix python-aiohttp llhttp

Change Log

* Sat Jul 29 2023 Benjamin A. Beasley - 8.1.1-1 - Update to 8.1.1 (close RHBZ#2216591) * Thu Jul 20 2023 Fedora Release Engineering - 8.1.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jun 3 2023 Benjamin A. Beasley - 8.1.0-5 - Remove explicit %set_build_flags, not needed since F36 * Wed Feb 15 2023 Benjamin A. Beasley - 8.1.0-4 - Fix test compiling/execution * Thu Jan 19 2023 Fedora Release Engineering - 8.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Tue Dec 20 2022 Benjamin A. Beasley - 8.1.0-2 - Indicate dirs. in files list with trailing slashes * Sat Oct 15 2022 Benjamin A. Beasley - 8.1.0-1 - Update to 8.1.0 (close RHBZ#2131175) * Sat Oct 15 2022 Benjamin A. Beasley - 8.0.0-1 - Update to 8.0.0 (close RHBZ#2131175) * Sat Oct 15 2022 Benjamin A. Beasley - 6.0.10-2 - Drop workarounds for Python 3.10 and older

References


[ 1 ] Bug #2216591 - llhttp-8.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2216591 [ 2 ] Bug #2227458 - python-aiohttp-3.8.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2227458

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-105880e618' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: llhttp
Product: Fedora 37
Version: 8.1.1
Release: 1.fc37
URL: https://github.com/nodejs/llhttp
Summary: Port of http_parser to llparse

Topics%20covered

Topics Covered

security advisory update critical Fedora CVE fix python-aiohttp llhttp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here