Bump aiohttp to v3.8.5 a security release

Ref: GHSA-45c4-8wx5-qw6w
aio-libs · Jul 19, 2023 · 9c13a52 · 9c13a52
1 parent 7c02129
commit 9c13a52
Show file tree

Hide file tree

Showing 6 changed files with 41 additions and 8 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -10,6 +10,45 @@
 
 .. towncrier release notes start
 
+3.8.5 (2023-07-19)
+==================
+
+Security bugfixes
+-----------------
+
+- Upgraded the vendored copy of llhttp_ to v8.1.1 -- by :user:`webknjaz`
+  and :user:`Dreamsorcerer`.
+
+  Thanks to :user:`sethmlarson` for reporting this and providing us with
+  comprehensive reproducer, workarounds and fixing details! For more
+  information, see
+  https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w.
+
+  .. _llhttp: https://llhttp.org
+
+  `#7346 <https://github.com/aio-libs/aiohttp/issues/7346>`_
+
+
+Features
+--------
+
+- Added information to C parser exceptions to show which character caused the error. -- by :user:`Dreamsorcerer`
+
+  `#7366 <https://github.com/aio-libs/aiohttp/issues/7366>`_
+
+
+Bugfixes
+--------
+
+- Fixed a transport is :data:`None` error -- by :user:`Dreamsorcerer`.
+
+  `#3355 <https://github.com/aio-libs/aiohttp/issues/3355>`_
+
+
+
+----
+
+
 3.8.4 (2023-02-12)
 ==================
 

diff --git a/CHANGES/3355.bugfix b/CHANGES/3355.bugfix
diff --git a/CHANGES/7346.feature b/CHANGES/7346.feature
diff --git a/CHANGES/7366.feature b/CHANGES/7366.feature
diff --git a/aiohttp/__init__.py b/aiohttp/__init__.py
@@ -1,4 +1,4 @@
-__version__ = "3.8.4.post0.dev0"
+__version__ = "3.8.5"
 
 from typing import Tuple
 

diff --git a/docs/spelling_wordlist.txt b/docs/spelling_wordlist.txt
@@ -39,6 +39,7 @@ botocore
 brotli
 brotlipy
 bugfix
+bugfixes
 Bugfixes
 builtin
 BytesIO