Darsh Kelaiya e15dc3c90d python3-aiohttp: fix CVE-2026-111749
Backport the upstream host-only cookie state fix [1] to aiohttp
3.13.5, as identified by [2]. Track host-only state by domain, path
and name so expiring another cookie cannot widen its domain scope.

Preserve this identity during filtering, replacement and JSON
persistence. Adapt regression assertions to the existing private
state because 3.13.5 lacks the newer public inspection property.

[1] https://github.com/aio-libs/aiohttp/commit/6a07c171ef9f3be583e2907dcd1931372efca8d6
[2] https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gx76-c99x-2c96

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-11-09 09:10:48 +05:30
2026-08-24 12:59:00 +05:30
2026-10-28 11:01:32 +05:30
2026-11-09 08:44:38 +05:30
2025-04-10 08:31:06 -07:00
2026-05-29 09:29:32 +05:30

Collection of layers for the OE-core universe

Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com

This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
134 MiB
0 Stars 1 Watchers 0 Forks
Languages
BitBake 85.3%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.1%