10 Commits

Author SHA1 Message Date
Gyorgy Sarvari
9bc066079f
python3-aiohttp: patch CVE-2025-69230
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69230

Backport the patch referenced by the NVD advisory.

The tests were only partially backported, as the original patch
touched some tests that don't exist in this version.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:42 +05:30
Gyorgy Sarvari
4814f0631c
python3-aiohttp: patch CVE-2025-69229
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69229

Backport the patches referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:41 +05:30
Gyorgy Sarvari
6ac033a227
python3-aiohttp: patch CVE-2025-69228
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69228

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:41 +05:30
Gyorgy Sarvari
0ea6c04dde
python3-aiohttp: patch CVE-2025-69227
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69227

Backport the patch that is referenced by teh NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:40 +05:30
Gyorgy Sarvari
4ac10b5dbb
python3-aiohttp: patch CVE-2025-69226
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69226

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:40 +05:30
Gyorgy Sarvari
0b467f2380
python3-aiohttp: patch CVE-2025-69225
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69225

Backport the patch that is referenced by the NVD report.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:39 +05:30
Gyorgy Sarvari
c24b8f9ced
python3-aiohttp: patch CVE-2025-69224
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69224

Backport the patch indicated by the NVD advisory.
Only a part of the tests were backported, because some of the
new tests require a compression method that is not supported
yet by this version.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-05 06:59:36 +05:30
Hongxu Jia
513e5f1a66
python3-aiohttp: apply compile option -flax-vector-conversions for gcc
The clang does not need option -flax-vector-conversions to
avoid build failure for 32bit arm target

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-14 07:36:55 -08:00
Hongxu Jia
6a21bd735b python3-aiohttp: fix compiler failure on 32-bit arm
Build 32bit python3-aiohttp failed on arm
...
vendor/llhttp/build/c/llhttp.c:2643:11: error: incompatible type for argument 1 of 'vandq_u16'
 2643 |           vcgeq_u8(input, vdupq_n_u8(' ')),
      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |           |
      |           uint8x16_t
...

Refer [1], add -flax-vector-conversions to 32bit arm compiler

[1] https://github.com/xmrig/xmrig/issues/3673

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-24 09:06:24 -07:00
Tom Geelen
4c9349f0fd
python3-aiohttp: 3.12.14 -> 3.12.15
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-21 14:18:02 -07:00