Hitendra Prajapati
bfbf6d481d
python3: fix CVE-2023-27043
...
Upstream-Status: Backport from 2a9273a0e4hprajapati@mvista.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
2024-09-16 06:09:56 -07:00
Hugo SIMELIERE
85134c7690
python3: CVE-2024-6232 CVE-2024-7592 fixes
...
Upstream-Status: Backport from b2f11ca766743acbe872hsimeliere.opensource@witekio.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
2024-09-16 06:09:56 -07:00
Rohini Sangam
630e7d6000
python3: Security fix for CVE-2024-8088
...
CVE fixed:
- CVE-2024-8088: python: cpython: denial of service in zipfile
Upstream-Status: Backport from e0264a6111rsangam@mvista.com >
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
2024-09-07 05:38:17 -07:00
Leon Anavi
1c798dccd1
python3: add PACKAGECONFIG[editline]
...
Backport PACKAGECONFIG[editline] from Scarthgap to Kirkstone
because libedit has feature parity with readline but is more
permissively licensed (BSD verses GPLv3). This patch provides
means of enabling editline in a distribution without GPLv3 and
in this case improves Python REPL keyboard support.
(From OE-Core rev: 12dc7d2081a1aaec90ffb3ed6718d757ce14b5ab)
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
2024-08-28 06:49:22 -07:00
Peter Marko
f1ad013a29
python3: Upgrade 3.10.13 -> 3.10.14
...
Addresses CVEs:
* CVE-2023-52425 (bundled expat)
* CVE-2023-6597 (https://github.com/python/cpython/pull/112840 )
News: https://github.com/python/cpython/blob/3.10/Misc/NEWS.d/3.10.14.rst
(From OE-Core rev: e0b77aa347c03f520802c8235ae0389bb855c146)
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
2024-05-15 09:44:14 -07:00
