Darsh Kelaiya e04156eb37 python3-aiohttp: fix CVE-2026-111750
Backport the upstream HEAD request parsing fix [1] to aiohttp 3.13.5,
as identified by [2]. Only responses to HEAD may skip their body;
incoming HEAD requests must consume the declared request body.

Retain the upstream regression that embeds a request in a HEAD body
and verifies that the following request remains correctly framed.
The pure-Python parser remains available with extensions installed.

[1] https://github.com/aio-libs/aiohttp/commit/9b27347e61454d9f8ca2055f4c67a37dee336e83
[2] https://github.com/aio-libs/aiohttp/security/advisories/GHSA-pqxq-w44r-73xw

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-11-09 09:10:48 +05:30
2026-08-24 12:59:00 +05:30
2026-10-28 11:01:32 +05:30
2026-11-09 08:44:38 +05:30
2025-04-10 08:31:06 -07:00
2019-06-15 16:45:33 -07:00
2026-05-29 09:29:32 +05:30

Collection of layers for the OE-core universe

Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com

This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
133 MiB
0 Stars 1 Watchers 0 Forks
Languages
BitBake 85.3%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.1%