Gyorgy Sarvari ba968dda37 python3-aiohttp: patch CVE-2025-69228
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-69228

Backport the patch that is referenced by the NVD advisory.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-12 13:38:12 +05:30

30 lines
888 B
BlitzBasic

SUMMARY = "Async http client/server framework"
DESCRIPTION = "Asynchronous HTTP client/server framework for asyncio and Python"
HOMEPAGE = "https://github.com/aio-libs/aiohttp"
LICENSE = "Apache-2.0"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=748073912af33aa59430d3702aa32d41"
SRC_URI[sha256sum] = "edea7d15772ceeb29db4aff55e482d4bcfb6ae160ce144f2682de02f6d693551"
SRC_URI += "file://CVE-2024-52304.patch \
file://CVE-2025-53643.patch \
file://CVE-2025-69225.patch \
file://CVE-2025-69226.patch \
file://CVE-2025-69228.patch \
"
PYPI_PACKAGE = "aiohttp"
inherit python_setuptools_build_meta pypi
RDEPENDS:${PN} = "\
python3-aiohappyeyeballs \
python3-aiosignal \
python3-async-timeout \
python3-attrs \
python3-frozenlist \
python3-misc \
python3-multidict \
python3-yarl \
python3-aiodns \
"