Darsh Kelaiya d21774156e python3-aiohttp: fix CVE-2026-111065
Backport the upstream cookie overflow and response cleanup fix [1]
to aiohttp 3.13.5, as identified by [2]. Clamp positive Max-Age values
before float conversion and expire nonpositive values immediately.

Close a received response if subsequent processing fails so a
malformed cookie cannot exhaust the connection pool. Include the
upstream extreme Max-Age and connection-release regression tests.
Adapt the response annotation and imports to the existing code.

[1] https://github.com/aio-libs/aiohttp/commit/9dd8eaf4e31f1237ef2c1574a8c82a739fca5805
[2] https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6cjc-53gc-5rqm

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-11-09 09:10:49 +05:30
2026-08-24 12:59:00 +05:30
2026-10-28 11:01:32 +05:30
2026-11-09 08:44:38 +05:30
2025-04-10 08:31:06 -07:00
2026-05-29 09:29:32 +05:30

Collection of layers for the OE-core universe

Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com

This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
133 MiB
0 Stars 1 Watchers 0 Forks
Languages
BitBake 85.3%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.1%