PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour python-aiohttp au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 8
This update for python-aiohttp fixes the following issues: - CVE-2024-27306: filenames and paths not escaped when generating index pages for static file handling. (bsc#1223098)
This update for python-aiohttp fixes the following issues: - CVE-2024-30251: Fixed infinite loop on specially crafted POST request (bsc#1223726).
This update for python-aiohttp fixes the following issues: - CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions (bsc#1233447)
This update for python-aiohttp fixes the following issues: - CVE-2023-49081: fixed an HTTP header injection via a crafted version (bsc#1217684).
This update for python-aiohttp fixes the following issues: - CVE-2023-47641: Fixed inconsistent interpretation of the http protocol, if content-length and transport-encoding are in the same header with transport-encoding value of 'chunked*' (bsc#1217174)
This update for python-aiohttp, python-typing_extensions fixes the following issues: - Include in SLE-15 (bsc#1197831) - Fixed required/optional keys with old-style TypedDict - Test in separate multibuild flavor to break depcycles with full python stdlib - Clean requirements specifications for python flavors - Add transitional typing-extensions provides - Fix tests for Python 3.9 - Official support for Python 3.8 and 3.9 - Fix build without python2 available - Fix isinstance() with generic protocol subclasses after subscripting - Fix tests for non-default interpreters - Use environment marker to specify typing dependency - Fix unions of p
This update for python-aiohttp fixes the following issues: - CVE-2021-21330: Fixed the way pure-Python HTTP parser interprets `//` (bsc#1184745)
This update for the Azure SDK and CLI adds support for the AHB (Azure Hybrid Benefit). (bsc#1176784, jsc#ECO=3105)
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.