meta-openembedded/meta-python
Jiaying Song 32200384c7 python3-pycares: fix CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares
is a C library that performs DNS requests and name resolutions
asynchronously. Prior to version 4.9.0, pycares is vulnerable to a
use-after-free condition that occurs when a Channel object is garbage
collected while DNS queries are still pending. This results in a fatal
Python error and interpreter crash. The vulnerability has been fixed in
pycares 4.9.0 by implementing a safe channel destruction mechanism.

References:
https://nvd.nist.gov/vuln/detail/CVE-2025-48945

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-06 19:23:22 -04:00
..
classes
conf python3-objgraph: Add recipe 2025-04-08 11:46:18 -07:00
licenses python3-crc32c: Declare Zlib license 2025-02-03 20:16:25 -08:00
recipes/devtool python3-breathe: Inherit ptest-python-pytest instead of ptest 2025-04-02 09:27:44 -07:00
recipes-connectivity Use https:// in HOMEPAGE variable instead of http:// 2025-03-25 18:32:07 -07:00
recipes-core pydantic: Mark host incompatible on RISCV32 2025-04-06 18:46:25 -07:00
recipes-devtools python3-pycares: fix CVE-2025-48945 2025-07-06 19:23:22 -04:00
recipes-extended python3-pykickstart: Upgrade 3.48 -> 3.62 2025-04-10 08:31:03 -07:00
recipes-networking/python Use https:// in HOMEPAGE variable instead of http:// 2025-03-25 18:32:07 -07:00
COPYING.MIT
README.md meta-openemnedded: Add myself as walnascar maintainer 2025-04-16 18:20:05 -07:00
SECURITY.md

meta-python

Introduction

This layer is intended to be the home of python modules for OpenEmbedded.

Dependencies

The meta-python layer depends on:

URI: git://git.openembedded.org/openembedded-core
layers: meta
branch: walnascar

URI: git://git.openembedded.org/meta-openembedded
layers: meta-oe
branch: walnascar

Contributing

The meta-openembedded mailinglist (openembedded-devel@lists.openembedded.org) is used for questions, comments and patch review. It is subscriber only, so please register before posting.

Send pull requests to openembedded-devel@lists.openembedded.org with '[meta-python][walnascar]' in the subject.

When sending single patches, please use something like: git send-email -M -1 --to=openembedded-devel@lists.openembedded.org --subject-prefix='meta-python][walnascar][PATCH'

Maintenance

Layer maintainers: Armin Kuster akuster808@gmail.com