Praveen Kumar 170d5d0523 python3: fix CVE-2025-8194 ...

There is a defect in the CPython “tarfile” module affecting the
“TarFile” extraction and entry enumeration APIs. The tar implementation
would process tar archives with negative offsets without error,
resulting in an infinite loop and deadlock during the parsing of
maliciously crafted tar archives. This vulnerability can be mitigated
by including the following patch after importing the “tarfile” module:
https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-8194

Upstream-patch:
cdae923ffe

(From OE-Core rev: c0f1143ca3f189fc6346a445a381829aed78aae8)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-08-13 08:42:58 -07:00

..

python3

python3: fix CVE-2025-8194

2025-08-13 08:42:58 -07:00

python3-calver

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-cffi

python3-cffi: Fix failing ptests with clang

2025-02-11 11:44:19 +00:00

python3-cryptography

python3-cryptography/python3-cryptography-vectors: Upgrade 44.0.0 -> 44.0.2

2025-03-17 22:38:32 +00:00

python3-cython

cython: swap prefix-mapping patch for an upstream commit

2024-11-21 12:16:28 +00:00

python3-hypothesis

python3-hypothesis: use python3-unittest-automake-output

2023-03-21 22:42:05 +00:00

python3-installer

python3-installer: add a patch to ensure RECORD file reproducibility

2024-10-22 12:28:17 +01:00

python3-jsonpointer

python3-jsonpointer: upgrade to 2.4

2023-07-10 11:36:34 +01:00

python3-jsonschema

python3-jsonschema: Fix annotation for validator_for's default

2024-11-01 12:13:18 +00:00

python3-libarchive-c

python3-libarchive-c: Avoid using find_library python API

2024-11-04 14:34:42 +00:00

python3-numpy

python3-numpy: upgrade 2.2.1 -> 2.2.2

2025-01-23 11:56:47 +00:00

python3-packaging

python3-packaging: Ignore old glibc tests on musl

2024-11-12 11:09:51 +00:00

python3-pbr

python3-pbr: upgrade 6.0.0 -> 6.1.0

2024-09-04 12:38:44 +01:00

python3-pefile

python3-pefile: add recipe from meta-openembedded

2024-10-01 12:40:48 +01:00

python3-pip

python3-pip: upgrade 24.3.1 -> 25.0

2025-02-05 12:49:55 +00:00

python3-requests

buildtools-tarball: Make buildtools respects host CA certificates

2025-05-14 08:33:40 -07:00

python3-setuptools

python3-setuptools: fix CVE-2025-47273

2025-07-04 07:50:16 -07:00

python3-smartypants

…

python3-urllib3

python3-urllib3: fix CVE-2025-50182

2025-07-04 07:50:16 -07:00

python3_3.13.4.bb

python3: fix CVE-2025-8194

2025-08-13 08:42:58 -07:00

python3-alabaster_1.0.0.bb

python3-alabaster: upgrade 0.7.16 -> 1.0.0

2024-08-15 14:51:55 +01:00

python3-asn1crypto_1.5.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-atomicwrites_1.4.1.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-attrs_25.3.0.bb

python3-attrs: upgrade 25.1.0 -> 25.3.0

2025-03-17 22:38:32 +00:00

python3-babel_2.17.0.bb

python3-babel: upgrade 2.16.0 -> 2.17.0

2025-02-18 22:53:45 +00:00

python3-bcrypt_4.3.0.bb

python3-bcrypt: upgrade 4.2.1 -> 4.3.0

2025-03-06 11:16:47 +00:00

python3-bcrypt-crates.inc

python3-bcrypt: upgrade 4.2.1 -> 4.3.0

2025-03-06 11:16:47 +00:00

python3-beartype_0.20.0.bb

python3-beartype: upgrade 0.19.0 -> 0.20.0

2025-03-06 11:16:47 +00:00

python3-booleanpy_4.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-build_1.2.2.bb

python3-build: upgrade 1.2.1 -> 1.2.2

2024-09-30 17:00:51 +01:00

python3-calver_2022.6.26.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-certifi_2025.1.31.bb

python3-certifi: upgrade 2024.12.14 -> 2025.1.31

2025-02-05 12:49:55 +00:00

python3-cffi_1.17.1.bb

python3-cffi: Fix failing ptests with clang

2025-02-11 11:44:19 +00:00

python3-chardet_5.2.0.bb

python3-chardet: remove pytest-runner DEPENDS

2024-07-24 22:51:39 +01:00

python3-click_8.1.8.bb

python3-click: update 8.1.7 -> 8.1.8

2025-01-09 16:59:23 +00:00

python3-cryptography-common.inc

python3-cryptography/python3-cryptography-vectors: Upgrade 44.0.0 -> 44.0.2

2025-03-17 22:38:32 +00:00

python3-cryptography-crates.inc

python3-cryptography/python3-cryptography-vectors: Upgrade 44.0.0 -> 44.0.2

2025-03-17 22:38:32 +00:00

python3-cryptography-vectors.bb

python3-cryptography/python3-cryptography-vectors: Upgrade 44.0.0 -> 44.0.2

2025-03-17 22:38:32 +00:00

python3-cryptography.bb

python3-cryptography/python3-cryptography-vectors: Upgrade 44.0.0 -> 44.0.2

2025-03-17 22:38:32 +00:00

python3-cython_3.0.12.bb

python3-cython: upgrade 3.0.11 -> 3.0.12

2025-02-18 22:53:45 +00:00

python3-dbus_1.4.0.bb

python3-dbus: upgrade 1.3.2 -> 1.4.0

2025-03-20 11:29:04 +00:00

python3-dbusmock_0.33.0.bb

python3-dbusmock: upgrade 0.32.2 -> 0.33.0

2024-12-24 13:49:27 +00:00

python3-docutils_0.21.2.bb

python3-docutils: fix interpreter lines

2024-07-03 14:57:50 +01:00

python3-dtc_1.7.2.bb

python3-dtc: update 1.7.0 -> 1.7.2

2024-12-05 17:07:10 +00:00

python3-dtschema_2025.2.bb

python3-dtschema: upgrade 2024.11 -> 2025.2

2025-02-18 22:53:45 +00:00

python3-editables_0.5.bb

python3-editables: upgrade 0.4 -> 0.5

2023-08-14 12:51:21 +01:00

python3-extras_1.0.0.bb

…

python3-flit-core_3.11.0.bb

python3-flit-core: upgrade 3.10.1 -> 3.11.0

2025-02-27 10:55:17 +00:00

python3-git_3.1.43.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-gitdb_4.0.12.bb

python3-gitdb: upgrade 4.0.11 -> 4.0.12

2025-01-09 15:26:50 +00:00

python3-hatch-fancy-pypi-readme_24.1.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-hatch-vcs_0.4.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-hatchling_1.27.0.bb

python3-hatchling: upgrade 1.26.3 -> 1.27.0

2024-12-24 13:49:27 +00:00

python3-hypothesis_6.129.2.bb

python3-hypothesis: upgrade 6.127.4 -> 6.129.2

2025-03-17 22:38:32 +00:00

python3-idna_3.10.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-imagesize_1.4.1.bb

python3-imagesize: Avoid non-ASCII in SUMMARY

2025-03-18 10:27:31 +00:00

python3-iniconfig_2.0.0.bb

python3-iniconfig: add BBCLASSEXTEND

2023-02-24 13:31:45 +00:00

python3-installer_0.7.0.bb

python3-installer: add a patch to ensure RECORD file reproducibility

2024-10-22 12:28:17 +01:00

python3-iso8601_2.1.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-jinja2_3.1.6.bb

python3-jinja2: upgrade 3.1.5 -> 3.1.6

2025-03-17 22:38:32 +00:00

python3-jsonpointer_3.0.0.bb

python3-jsonpointer: upgrade 2.4 -> 3.0.0

2024-07-26 12:28:42 +01:00

python3-jsonschema_4.23.0.bb

python3-jsonschema: Fix annotation for validator_for's default

2024-11-01 12:13:18 +00:00

python3-jsonschema-specifications_2024.10.1.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-libarchive-c_5.1.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-license-expression_30.4.1.bb

python3-license-expression: fix ptest installation

2025-02-18 11:56:03 +00:00

python3-lxml_5.3.1.bb

python3-lxml: upgrade 5.3.0 -> 5.3.1

2025-02-18 11:56:04 +00:00

python3-magic_0.4.27.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-mako_1.3.9.bb

python3-mako: upgrade 1.3.8 -> 1.3.9

2025-02-18 22:53:45 +00:00

python3-markdown_3.7.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-markupsafe_3.0.2.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-maturin_1.8.3.bb

python3-maturin: upgrade 1.8.1 -> 1.8.3

2025-03-17 22:38:32 +00:00

python3-maturin-crates.inc

python3-maturin: upgrade 1.8.1 -> 1.8.3

2025-03-17 22:38:32 +00:00

python3-meson-python_0.17.1.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-more-itertools_10.6.0.bb

python3-more-itertools: upgrade 10.5.0 -> 10.6.0

2025-02-05 12:49:55 +00:00

python3-ndg-httpsclient_0.5.1.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-numpy_2.2.3.bb

python3-numpy: upgrade 2.2.2 -> 2.2.3

2025-02-18 22:53:45 +00:00

python3-packaging_24.2.bb

python3-packaging: upgrade 24.1 -> 24.2

2024-11-18 22:09:03 +00:00

python3-pathspec_0.12.1.bb

python3-pathspec: use python_flit_core

2024-07-24 22:51:40 +01:00

python3-pbr_6.1.0.bb

python3-pbr: upgrade 6.0.0 -> 6.1.0

2024-09-04 12:38:44 +01:00

python3-pefile_2024.8.26.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-pip_25.0.1.bb

python3-pip: upgrade 25.0 -> 25.0.1

2025-02-18 22:53:45 +00:00

python3-pluggy_1.5.0.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-ply_3.11.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-poetry-core_2.1.1.bb

python3-poetry-core: upgrade 2.0.1 -> 2.1.1

2025-02-18 22:53:45 +00:00

python3-pretend_1.0.9.bb

…

python3-psutil_7.0.0.bb

python3-psutil: upgrade 6.1.1 -> 7.0.0

2025-02-18 22:53:45 +00:00

python3-pyasn1_0.6.1.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-pycairo_1.27.0.bb

python3-pycairo: upgrade 1.26.1 -> 1.27.0

2024-09-30 17:00:51 +01:00

python3-pycparser_2.22.bb

python3-pycparser: cleanup RDEPENDS

2024-05-15 16:39:19 +01:00

python3-pycryptodome_3.22.0.bb

python3-pycryptodome: upgrade 3.21.0 -> 3.22.0

2025-03-19 11:49:45 +00:00

python3-pycryptodomex_3.22.0.bb

python3-pycryptodomex: upgrade 3.21.0 -> 3.22.0

2025-03-19 11:49:45 +00:00

python3-pyelftools_0.32.bb

python3-pyelftools: upgrade 0.31 -> 0.32

2025-03-06 11:16:47 +00:00

python3-pygments_2.19.1.bb

python3-pygments: upgrade 2.19.0 -> 2.19.1

2025-02-05 12:49:55 +00:00

python3-pygobject_3.52.2.bb

python3-pygobject: RDEPENDS on gobject-introspection

2025-06-02 10:26:30 -07:00

python3-pyopenssl_25.0.0.bb

python3-pyopenssl: upgrade 24.3.0 -> 25.0.0

2025-02-05 12:49:55 +00:00

python3-pyparsing_3.2.1.bb

python3-pyparsing: upgrade 3.2.0 -> 3.2.1

2025-01-03 10:51:27 +00:00

python3-pyproject-hooks_1.2.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-pyproject-metadata_0.9.1.bb

python3-pyproject-metadata: upgrade 0.9.0 -> 0.9.1

2025-03-17 22:38:32 +00:00

python3-pyrsistent_0.20.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pysocks_1.7.1.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-pytest_8.3.5.bb

python3-pytest: upgrade 8.3.4 -> 8.3.5

2025-03-06 11:16:47 +00:00

python3-pytest-subtests_0.14.1.bb

python3-pytest-subtests: upgrade 0.13.1 -> 0.14.1

2024-12-24 13:49:28 +00:00

python3-pytz_2025.1.bb

python3-pytz: upgrade 2024.2 -> 2025.1

2025-02-05 12:49:55 +00:00

python3-pyyaml_6.0.2.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-rdflib_7.1.3.bb

python3-rdflib: upgrade 7.1.1 -> 7.1.3

2025-02-05 12:49:56 +00:00

python3-referencing_0.36.2.bb

python3-referencing: upgrade 0.35.1 -> 0.36.2

2025-02-05 12:49:55 +00:00

python3-requests_2.32.4.bb

python3-requests: upgrade 2.32.3 -> 2.32.4

2025-06-20 09:21:27 -07:00

python3-rfc3339-validator_0.1.4.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-rfc3987_1.3.8.bb

…

python3-roman-numerals-py_3.1.0.bb

python3-roman-numbers-py: correct upstream version check

2025-03-11 21:29:50 +00:00

python3-rpds-py_0.22.3.bb

python3-rpds-py: upgrade 0.21.0 -> 0.22.3

2025-01-08 12:37:20 +00:00

python3-rpds-py-crates.inc

python3-rpds-py: upgrade 0.21.0 -> 0.22.3

2025-01-08 12:37:20 +00:00

python3-ruamel-yaml_0.18.10.bb

python3-ruamel-yaml: upgrade 0.18.9 -> 0.18.10

2025-02-05 12:49:56 +00:00

python3-scons_4.9.0.bb

python3-scons: upgrade 4.8.1 -> 4.9.0

2025-03-17 22:38:32 +00:00

python3-semantic-version_2.10.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-setuptools_76.0.0.bb

python3-setuptools: fix CVE-2025-47273

2025-07-04 07:50:16 -07:00

python3-setuptools-rust_1.11.0.bb

python3-setuptools-rust: upgrade 1.10.2 -> 1.11.0

2025-03-17 22:38:32 +00:00

python3-setuptools-scm_8.2.0.bb

python3-setuptools-scm: upgrade 8.1.0 -> 8.2.0

2025-02-27 10:55:17 +00:00

python3-six_1.17.0.bb

python3-six: upgrade 1.16.0 -> 1.17.0

2024-12-24 13:49:28 +00:00

python3-smartypants_2.0.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-smmap_6.0.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-snowballstemmer_2.2.0.bb

…

python3-sortedcontainers_2.4.0.bb

…

python3-spdx-tools_0.8.3.bb

python3-spdx-tools: upgrade 0.8.2 -> 0.8.3

2024-10-11 12:17:02 +01:00

python3-sphinx_8.2.1.bb

python3-sphinx: upgrade 8.1.3 -> 8.2.1

2025-02-27 10:55:17 +00:00

python3-sphinx-rtd-theme_3.0.2.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-sphinxcontrib-applehelp_2.0.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-sphinxcontrib-devhelp_2.0.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-sphinxcontrib-htmlhelp_2.1.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-sphinxcontrib-jquery_4.1.bb

python3-sphinxcontrib-jquery: add a recipe and make python3-sphinx-rtd-theme depend on it

2024-03-07 17:25:02 +00:00

python3-sphinxcontrib-jsmath_1.0.1.bb

meta/recipes: ensure all recipes have a SUMMARY

2023-04-13 13:53:44 +01:00

python3-sphinxcontrib-qthelp_2.0.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-sphinxcontrib-serializinghtml_2.0.0.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-subunit_1.4.4.bb

python3-subunit: use python_setuptools_build_meta build class

2024-07-24 22:51:40 +01:00

python3-testtools_2.7.2.bb

python3-testtools: upgrade 2.7.1 -> 2.7.2

2024-06-25 11:50:58 +01:00

python3-trove-classifiers_2025.3.13.13.bb

python3-trove-classifiers: upgrade 2025.2.18.16 -> 2025.3.13.13

2025-03-17 22:38:32 +00:00

python3-typing-extensions_4.12.2.bb

python3-*: Update recipes to correctly check the upstream packages

2024-12-17 11:41:53 +00:00

python3-typogrify_2.1.0.bb

python3-typogrify: upgrade 2.0.7 -> 2.1.0

2025-02-10 13:03:58 +00:00

python3-unittest-automake-output_0.2.bb

python3-unittest-automake-output: add dependency on unittest

2024-07-26 12:28:42 +01:00

python3-uritools_4.0.3.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-urllib3_2.3.0.bb

python3-urllib3: fix CVE-2025-50182

2025-07-04 07:50:16 -07:00

python3-vcversioner_2.16.0.0.bb

…

python3-wcwidth_0.2.13.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-webcolors_24.8.0.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-websockets_15.0.1.bb

python3-websockets: upgrade 15.0 -> 15.0.1

2025-03-17 22:38:32 +00:00

python3-wheel_0.45.1.bb

python3-wheel: upgrade 0.45.0 -> 0.45.1

2024-11-27 16:44:48 +00:00

python3-xmltodict_0.14.2.bb

python3-*: Update recipes with pytest ptests to use the new ptest-python-pytest class

2025-01-08 12:37:20 +00:00

python3-yamllint_1.36.0.bb

python3-yamllint: upgrade 1.35.1 -> 1.36.0

2025-03-17 22:38:32 +00:00

python3-zipp_3.21.0.bb

python3-zipp: upgrade 3.20.2 -> 3.21.0

2024-11-27 14:58:48 +00:00

python-extras.inc

…

python-pbr.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-pycryptodome.inc

python3-cryptodome: remove redundant PYPI_PACKAGE_EXT

2024-06-07 23:21:42 +01:00

python-six.inc

python3-six: upgrade 1.16.0 -> 1.17.0

2024-12-24 13:49:28 +00:00