mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-15 12:32:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

python3-cryptography: Fix CVE-2026-26007

Browse Source 
CVE-2026-26007 is fixed upstream in version 46.0.5.
Our current version (42.0.5, scarthgap) is still reported as vulnerable
by NVD.
Backport the upstream fix to address this CVE.

Upstream commit:
  0eebb9dbb6

CVE report:
  https://nvd.nist.gov/vuln/detail/CVE-2026-26007

(From OE-Core rev: a363958725430237160b0a83a6a6acbe8380fba3)

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Nguyen Dat Tho
2026-03-30 17:17:19 +09:00
committed by Paul Barker
parent 5c365149ac
commit 7421603502
2 changed files with 150 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
meta/recipes-devtools/python/python3-cryptography_42.0.5.bb
View File

@@ -11,6 +11,7 @@ LDSHARED += "-pthread"
SRC_URI[sha256sum] = "6fe07eec95dfd477eb9530aef5bead34fec819b3aaf6c5bd6d20565da607bfe1"
SRC_URI += "file://0001-pyproject.toml-remove-benchmark-disable-option.patch \
file://CVE-2026-26007.patch \
file://check-memfree.py \
file://run-ptest \
"