Darsh Kelaiya 9b550e9d81 python3-aiohttp: fix CVE-2026-111064
Backport the initial idle-connection timeout fix [1] to aiohttp
3.13.5, as identified by [2]. Start the keepalive deadline when the
connection is established so peers that send no request or trickle
incomplete headers cannot keep it open indefinitely.

Retain the existing timeout default and the upstream regressions
for idle peers, trickled headers, disabled deadlines, slow handlers
and WebSocket keepalive cleanup.

[1] https://github.com/aio-libs/aiohttp/commit/be846822b4b3a5a54b6163e794b42dc06fba54a3
[2] https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5wr8-gcqf-gqf3

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-11-09 09:10:50 +05:30
2026-08-24 12:59:00 +05:30
2026-10-28 11:01:32 +05:30
2026-11-09 08:44:38 +05:30
2025-04-10 08:31:06 -07:00
2026-05-29 09:29:32 +05:30

Collection of layers for the OE-core universe

Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com

This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
134 MiB
0 Stars 1 Watchers 0 Forks
Languages
BitBake 85.3%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.1%