Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Fedora 38 Update: llhttp 9.2.1 Critical Fix Released for 2024-5dc487ee89

fedora
Calendar Grey April 20, 2024
Dist Fedora Esm H88
Upgrade llhttp version 9.2.1 in Fedora 38 for python-aiohttp to address significant vulnerabilities and improve security measures efficiently.
Update llhttp to 9.2.1, fixing CVE-2024-27982

Summary

Python HTTP client/server for asyncio which supports both the client and the

server side of the HTTP protocol, client and server websocket, and webservers

with middlewares and pluggable routing.

Update Information:

Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.

Change Log

* Thu Apr 11 2024 Benjamin A. Beasley - 3.9.3-3 - Backport support for llhttp 9.2.1 - Started rejecting obsolete line folding in Python parser to match * Fri Feb 16 2024 Benjamin A. Beasley - 3.9.3-2 - Rebuilt for llhttp-9.2.0

References


[ 1 ] Bug #2273352 - llhttp-9.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2273352

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-5dc487ee89' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-aiohttp
Product: Fedora 38
Version: 3.9.3
Release: 3.fc38
Summary: Python HTTP client/server for asyncio

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here