mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-17 18:32:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

python3: upgrade 3.13.3 -> 3.13.4

Browse Source 
Refresh patches.

* https://www.python.org/downloads/release/python-3134/
  Security content in this release
  * gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330]
    [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed
    tarfile extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
  * gh-133767: Fix use-after-free in the “unicode-escape” decoder with a
    non-“strict” error handler.
  * gh-128840: Short-circuit the processing of long IPv6 addresses early
    in ipaddress to prevent excessive memory consumption and a minor
    denial-of-service.

gh-133767 got meawhile CVE-2025-4516 assigned.

(From OE-Core rev: 55a9cd748531c75d46f5d6d53af692a38c6b6716)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Peter Marko
2025-06-08 23:54:36 +02:00
committed by Steve Sakoman
parent d5c9b8a1d6
commit 5e9c6deafb
9 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch
View File

@@ -13,12 +13,12 @@ Upstream-Status: Inappropriate [OE-specific]
Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
---
Lib/test/test_readline.py | 2 ++
1 file changed, 2 insertions(+)
Lib/test/test_readline.py | 3 +++
1 file changed, 3 insertions(+)
--- a/Lib/test/test_readline.py
+++ b/Lib/test/test_readline.py
@@ -70,6 +70,7 @@ class TestHistoryManipulation (unittest.
@@ -71,6 +71,7 @@ class TestHistoryManipulation (unittest.TestCase):
@unittest.skipUnless(hasattr(readline, "append_history_file"),
"append_history not available")
@@ -26,7 +26,7 @@ Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
def test_write_read_append(self):
hfile = tempfile.NamedTemporaryFile(delete=False)
hfile.close()
@@ -141,6 +142,7 @@ class TestHistoryManipulation (unittest.
@@ -142,6 +143,7 @@ class TestHistoryManipulation (unittest.TestCase):
self.assertEqual(readline.get_history_item(1), "entrée 1")
self.assertEqual(readline.get_history_item(2), "entrée 22")
@@ -34,7 +34,7 @@ Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
def test_write_read_limited_history(self):
previous_length = readline.get_history_length()
self.addCleanup(readline.set_history_length, previous_length)
@@ -382,6 +384,7 @@ readline.write_history_file(history_file
@@ -390,6 +392,7 @@ readline.write_history_file(history_file)
self.assertIn(b"done", output)