This series fix the following CVEs: - CVE-2026-11940 - CVE-2026-11972 - CVE-2026-9669
On master and wrynose the CVE-2026-9669 patch is not necessary since it is already included in 3.14.6 Signed-off-by: Benjamin Robin (Schneider Electric) <[email protected]> --- Changes in v2: - Add back Co-authored-by in CVE-2026-11972 patch It had been deleted by mistake due to a lack of knowledge regarding how to handle it. - Fix commit author of CVE-2026-9669 patch to use the original author and not the bot named Miss Islington. - Link to v1: https://patch.msgid.link/[email protected] --- Benjamin Robin (Schneider Electric) (3): python3: fix CVE-2026-11940 python3: fix CVE-2026-11972 python3: fix CVE-2026-9669 .../python/python3/CVE-2026-11940.patch | 66 +++++++++++++++ .../python/python3/CVE-2026-11972.patch | 60 ++++++++++++++ .../python/python3/CVE-2026-9669.patch | 96 ++++++++++++++++++++++ meta/recipes-devtools/python/python3_3.12.13.bb | 3 + 4 files changed, 225 insertions(+) --- base-commit: 2814f0962f56c8d1afa4de76d2895ba9b5cb767d change-id: 20260706-fix-cves-python-scarthgap-76eb4e1f3d78 Best regards, -- Benjamin Robin (Schneider Electric) <[email protected]>
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241334): https://lists.openembedded.org/g/openembedded-core/message/241334 Mute This Topic: https://lists.openembedded.org/mt/120355613/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
