Debian dla-4613 : python-aiohttp-doc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4613 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4613-1 [email protected]...

CVE-2026-34525 vulnerabilities

Vulnerabilities for packages: keep-fips, kubeflow-pipelines-visualization-server, metaflow-service, keep, tritonserver-backend-vllm-cuda-13.0, request-1276, kserve, py3-cassandra-medusa, airflow, tritonserver-backend-vllm-cuda-12.9, checkov, text-generation-inference,...

CVE-2026-34525

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, multiple Host headers were allowed in aiohttp. This issue has been patched in version 3.13.4...

CVE-2026-34525

AIOHTTP (async HTTP client/server for asyncio and Python) before version 3.13.4 allowed multiple Host headers due to its header handling. This issue has been fixed in version 3.13.4. Affected component: Host header processing in aiohttp prior to 3.13.4. Remediation: upgrade to 3.13.4 or later. Ex...