It was discovered that AIOHTTP did not properly restrict file access when the 'follow_symlinks' option was set to True. A remote attacker could possibly use this issue to access unauthorized files on the system.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "python3-aiohttp": "3.0.1-1ubuntu0.1~esm4", "python3-aiohttp-dbg": "3.0.1-1ubuntu0.1~esm4" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "python3-aiohttp": "3.6.2-1ubuntu1+esm3", "python3-aiohttp-dbg": "3.6.2-1ubuntu1+esm3" } ] }
{ "availability": "No subscription required", "binaries": [ { "python3-aiohttp": "3.8.1-4ubuntu0.2", "python-aiohttp-doc": "3.8.1-4ubuntu0.2", "python3-aiohttp-dbgsym": "3.8.1-4ubuntu0.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "python3-aiohttp": "3.9.1-1ubuntu0.1", "python-aiohttp-doc": "3.9.1-1ubuntu0.1", "python3-aiohttp-dbgsym": "3.9.1-1ubuntu0.1" } ] }