python3: patch CVE-2025-13837

Pick patch from 3.12 branch per NVD report.

(From OE-Core rev: cfbac1d5edae4b0204ec4c01b5f710d100ceb2ad)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Peter Marko
2026-01-18 22:17:56 +01:00
committed by Paul Barker
parent ad756dec39
commit 4ad238e9c1
2 changed files with 163 additions and 0 deletions

View File

@@ -39,6 +39,7 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \
file://0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch \
file://CVE-2025-6075.patch \
file://CVE-2025-13836.patch \
file://CVE-2025-13837.patch \
"
SRC_URI:append:class-native = " \