mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-25 07:36:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

python3-lxml: fix CVE-2026-41066

Browse Source 
This patch applies the upstream fix as referenced in [2], using the
commit shown in [1].

Regenerate etree.c with the matching Cython 3.0.9 release.  Keep the
iterparse source layout line-stable so that the generated diff contains
only the functional and documentation changes instead of unrelated
source-location updates.

[1] ab431ea0b9
[2] https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw

(From OE-Core rev: 1ffb0b524d15aab153553e4739f7d8b697593b8a)

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Darsh Kelaiya
2026-09-03 05:14:31 -07:00
committed by Paul Barker
parent 6a8f8aac97
commit c77dc0dfc3
2 changed files with 265 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
meta/recipes-devtools/python/python3-lxml_5.0.2.bb
View File

@@ -20,7 +20,9 @@ DEPENDS += "libxml2 libxslt"
SRC_URI[sha256sum] = "6399703c40ba53e2c3b72fdb56cb908d2b83c08082ecf17de839b27e68d1e598"
SRC_URI += "${PYPI_SRC_URI}"
SRC_URI += "${PYPI_SRC_URI} \
file://CVE-2026-41066.patch \
"
inherit pkgconfig pypi setuptools3
# {standard input}: Assembler messages: