mirror of
https://git.yoctoproject.org/git/poky
synced 2026-01-01 13:58:04 +00:00
8cd040c218
Drop upstreamed patch and refresh remaining patches. * https://www.python.org/downloads/release/python-31017/ Security content in this release * gh-131809: Upgrade vendored expat to 2.7.1 * gh-80222: Folding of quoted string in display_name violates RFC * gh-121284: Invalid RFC 2047 address header after refolding with email.policy.default * gh-131261: Update libexpat to 2.7.0 * gh-105704: CVE-2025-0938 urlparse does not flag hostname containing [ or ] as incorrect * gh-119511: OOM vulnerability in the imaplib module * https://www.python.org/downloads/release/python-31018/ Security content in this release * gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330] [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed tarfile extraction filters (filter="data" and filter="tar") to be bypassed using crafted symlinks and hard links. * gh-133767: Fix use-after-free in the “unicode-escape” decoder with a non-“strict” error handler. * gh-128840: Short-circuit the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor denial-of-service. gh-133767 got meawhile CVE-2025-4516 assigned. (From OE-Core rev: 838a8b5ca148dfa6c6c2c76f1705d1e358a31648) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> |
||
|---|---|---|
| .. | ||
| 0001-Avoid-shebang-overflow-on-python-config.py.patch | ||
| 0001-bpo-36852-proper-detection-of-mips-architecture-for-.patch | ||
| 0001-distutils-sysconfig-append-STAGING_LIBDIR-python-sys.patch | ||
| 0001-Do-not-add-usr-lib-termcap-to-linker-flags-to-avoid-.patch | ||
| 0001-Do-not-use-the-shell-version-of-python-config-that-w.patch | ||
| 0001-Don-t-search-system-for-headers-libraries.patch | ||
| 0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch | ||
| 0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch | ||
| 0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch | ||
| 0001-Makefile-do-not-compile-.pyc-in-parallel.patch | ||
| 0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch | ||
| 0001-python3-use-cc_basename-to-replace-CC-for-checking-c.patch | ||
| 0001-setup.py-Do-not-detect-multiarch-paths-when-cross-co.patch | ||
| 0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch | ||
| 0001-sysconfig.py-use-platlibdir-also-for-purelib.patch | ||
| 0001-test_ctypes.test_find-skip-without-tools-sdk.patch | ||
| 0001-test_locale.py-correct-the-test-output-format.patch | ||
| 0001-test_storlines-skip-due-to-load-variability.patch | ||
| 0001-Use-FLAG_REF-always-for-interned-strings.patch | ||
| 12-distutils-prefix-is-inside-staging-area.patch | ||
| 0017-setup.py-do-not-report-missing-dependencies-for-disa.patch | ||
| 0020-configure.ac-setup.py-do-not-add-a-curses-include-pa.patch | ||
| avoid_warning_about_tkinter.patch | ||
| cgi_py.patch | ||
| check_build_completeness.py | ||
| create_manifest3.py | ||
| crosspythonpath.patch | ||
| deterministic_imports.patch | ||
| get_module_deps3.py | ||
| makerace.patch | ||
| python-config.patch | ||
| python3-manifest.json | ||
| reformat_sysconfig.py | ||
| run-ptest | ||