python3-aiohttp: fix CVE-2026-34993

This patch applies the reviewed upstream fix shown in [1]. The
advisory identifying the fix is referenced in [2].

[1] https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-34993

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Darsh Kelaiya
2026-09-01 10:18:06 +05:30
committed by Anuj Mittal
parent b1fdc4d179
commit 1108d82e62
2 changed files with 365 additions and 0 deletions
@@ -19,6 +19,7 @@ SRC_URI += "file://CVE-2024-52304.patch \
file://CVE-2026-22815.patch \
file://CVE-2026-34514.patch \
file://CVE-2026-34513.patch \
file://CVE-2026-34993.patch \
"
CVE_STATUS[CVE-2026-34515] = "not-applicable-platform: Vulnerability only affects applications running on Windows"