Skip to content

Commit 9c13a52

Browse files
committed
Bump aiohttp to v3.8.5 a security release
Ref: GHSA-45c4-8wx5-qw6w
1 parent 7c02129 commit 9c13a52

File tree

6 files changed

+41
-8
lines changed

6 files changed

+41
-8
lines changed

CHANGES.rst

+39
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,45 @@
1010

1111
.. towncrier release notes start
1212
13+
3.8.5 (2023-07-19)
14+
==================
15+
16+
Security bugfixes
17+
-----------------
18+
19+
- Upgraded the vendored copy of llhttp_ to v8.1.1 -- by :user:`webknjaz`
20+
and :user:`Dreamsorcerer`.
21+
22+
Thanks to :user:`sethmlarson` for reporting this and providing us with
23+
comprehensive reproducer, workarounds and fixing details! For more
24+
information, see
25+
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w.
26+
27+
.. _llhttp: https://llhttp.org
28+
29+
`#7346 <https://github.com/aio-libs/aiohttp/issues/7346>`_
30+
31+
32+
Features
33+
--------
34+
35+
- Added information to C parser exceptions to show which character caused the error. -- by :user:`Dreamsorcerer`
36+
37+
`#7366 <https://github.com/aio-libs/aiohttp/issues/7366>`_
38+
39+
40+
Bugfixes
41+
--------
42+
43+
- Fixed a transport is :data:`None` error -- by :user:`Dreamsorcerer`.
44+
45+
`#3355 <https://github.com/aio-libs/aiohttp/issues/3355>`_
46+
47+
48+
49+
----
50+
51+
1352
3.8.4 (2023-02-12)
1453
==================
1554

CHANGES/3355.bugfix

-1
This file was deleted.

CHANGES/7346.feature

-5
This file was deleted.

CHANGES/7366.feature

-1
This file was deleted.

aiohttp/__init__.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
__version__ = "3.8.4.post0.dev0"
1+
__version__ = "3.8.5"
22

33
from typing import Tuple
44

docs/spelling_wordlist.txt

+1
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,7 @@ botocore
3939
brotli
4040
brotlipy
4141
bugfix
42+
bugfixes
4243
Bugfixes
4344
builtin
4445
BytesIO

0 commit comments

Comments
 (0)