Summary
This update for python-aiohttp, python-typing_extensions fixes the following issues:
- Include in SLE-15 (bsc#1197831)
- Fixed required/optional keys with old-style TypedDict
- Test in separate multibuild flavor to break depcycles with full python stdlib
- Clean requirements specifications for python flavors
- Add transitional typing-extensions provides
- Fix tests for Python 3.9
- Official support for Python 3.8 and 3.9
- Fix build without python2 available
- Fix isinstance() with generic protocol subclasses after subscripting
- Fix tests for non-default interpreters
- Use environment marker to specify typing dependency
- Fix unions of protocols on Python 2
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| openSUSE · Leap 15.3 | python-aiohttp | 3.6.0-150100.3.9.1 |
| openSUSE · Leap 15.4 | python-aiohttp | 3.6.0-150100.3.9.1 |
| openSUSE · Leap 15.4 | python-typing_extensions | 3.10.0.0-150400.3.2.1 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Public Cloud 15 SP1 | python-aiohttp | 3.6.0-150100.3.9.1 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Public Cloud 15 SP1 | python-typing_extensions | 3.10.0.0-150100.3.3.1 |
| SUSE · SLES 15 SP2 Linux Enterprise Module for Public Cloud 15 SP2 | python-aiohttp | 3.6.0-150100.3.9.1 |
| SUSE · SLES 15 SP2 Linux Enterprise Module for Public Cloud 15 SP2 | python-typing_extensions | 3.10.0.0-150100.3.3.1 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Public Cloud 15 SP3 | python-aiohttp | 3.6.0-150100.3.9.1 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Public Cloud 15 SP3 | python-typing_extensions | 3.10.0.0-150100.3.3.1 |
| SUSE · SLES 15 SP4 Linux Enterprise Module for Public Cloud 15 SP4 | python-aiohttp | 3.6.0-150100.3.9.1 |
| SUSE · SLES 15 SP4 Linux Enterprise Module for Server Applications 15 SP4 | python-typing_extensions | 3.10.0.0-150400.3.2.1 |
Vulnerabilities 1
-
Low 3.1
Open redirect vulnerability in aiohttp
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different websit…