Hi, Alright, I will drop the patch for master, I will check if it is needed for scarthgap.
Thanks! ________________________________ From: Mathieu Dubois-Briand <[email protected]> Sent: Tuesday, February 17, 2026 09:51 To: Adarsh Jagadish Kamini <[email protected]>; [email protected] <[email protected]> Subject: Re: [OE-core][master][PATCH v4] python3-pip: Backport fix CVE-2026-1703 On Fri Feb 13, 2026 at 3:32 PM CET, Adarsh Jagadish Kamini wrote: > From: Adarsh Jagadish Kamini <[email protected]> > > Include the patch linked in the NVD report: > https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735 > > Signed-off-by: Adarsh Jagadish Kamini <[email protected]> > --- Hi Adarsh, Thanks for your patch. However python3-pip was recently upgraded to version 26.0 which includes this fix. Thanks, Mathieu -- Mathieu Dubois-Briand, Bootlin Embedded Linux and Kernel engineering https://bootlin.com
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#231244): https://lists.openembedded.org/g/openembedded-core/message/231244 Mute This Topic: https://lists.openembedded.org/mt/117793242/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
