Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-54279 →
DEBIAN-CVE-2026-54279
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save(...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
python-aiohttp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
python-aiohttp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
python-aiohttp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.1-1"}]}]
Références
- advisory security-tracker.debian.org