[ubuntu/jammy-security] python-aiohttp 3.8.1-4ubuntu0.2 (Accepted)

[Steve Beattie]

python-aiohttp (3.8.1-4ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: When 'follow_symlinks' is enabled, file paths 
    are not properly validated, allowing unauthorized access to      
    files on the system.
    - debian/patches/CVE-2024-23334.patch: Validate static paths.
    - CVE-2024-23334

Date: 2024-08-30 22:01:08.952440+00:00
Changed-By: Chris Kim <chris.kim at canonical.com>
Signed-By: Steve Beattie <sbeattie at ubuntu.com>
https://launchpad.net/ubuntu/+source/python-aiohttp/3.8.1-4ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.