Praveen Kumar c6234dce63 python3: fix CVE-2025-6075 ...

If the value passed to os.path.expandvars() is user-controlled a
performance degradation is possible when expanding environment variables.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-6075

Upstream-patch:
892747b4cf

(From OE-Core rev: 9a7f33d85355ffbe382aa175c04c64541e77b441)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-12-01 06:50:49 -08:00

..

12-distutils-prefix-is-inside-staging-area.patch

python3: update 3.10.1 -> 3.10.2

2022-01-20 11:57:28 +00:00

0001-Avoid-shebang-overflow-on-python-config.py.patch

python: Avoid shebang overflow on python-config.py

2022-06-24 23:57:42 +01:00

0001-bpo-36852-proper-detection-of-mips-architecture-for-.patch

python3: update 3.10.1 -> 3.10.2

2022-01-20 11:57:28 +00:00

0001-distutils-sysconfig-append-STAGING_LIBDIR-python-sys.patch

python3: update 3.10.1 -> 3.10.2

2022-01-20 11:57:28 +00:00

0001-Do-not-add-usr-lib-termcap-to-linker-flags-to-avoid-.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-Do-not-use-the-shell-version-of-python-config-that-w.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-Don-t-search-system-for-headers-libraries.patch

python3: upgrade 3.10.15 -> 3.10.16

2025-01-09 08:41:04 -08:00

0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch

python3: upgrade 3.10.18 -> 3.10.19

2025-10-24 06:47:20 -07:00

0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch

python3: update 3.10.1 -> 3.10.2

2022-01-20 11:57:28 +00:00

0001-Makefile-do-not-compile-.pyc-in-parallel.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

0001-python3-use-cc_basename-to-replace-CC-for-checking-c.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-setup.py-Do-not-detect-multiarch-paths-when-cross-co.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-sysconfig.py-use-platlibdir-also-for-purelib.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

0001-test_ctypes.test_find-skip-without-tools-sdk.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

0001-test_locale.py-correct-the-test-output-format.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

0001-test_storlines-skip-due-to-load-variability.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0001-Use-FLAG_REF-always-for-interned-strings.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

0017-setup.py-do-not-report-missing-dependencies-for-disa.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

0020-configure.ac-setup.py-do-not-add-a-curses-include-pa.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

avoid_warning_about_tkinter.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

cgi_py.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

check_build_completeness.py

python3: upgrade to 3.7.2

2019-02-08 10:57:19 +00:00

create_manifest3.py

python3: Improve logging, syntax and update deprecated modules to create_manifest

2021-04-18 11:37:26 +01:00

crosspythonpath.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

CVE-2025-6075.patch

python3: fix CVE-2025-6075

2025-12-01 06:50:49 -08:00

deterministic_imports.patch

python3: Ensure stale empty python module directories don't break the build

2022-06-24 23:57:42 +01:00

get_module_deps3.py

python3: fix missing comma in get_module_deps3.py

2023-08-02 04:47:13 -10:00

makerace.patch

python3: upgrade 3.10.16 -> 3.10.18

2025-06-13 08:42:35 -07:00

python3-manifest.json

python3-manifest: -pprint RDEPENDS on -profile

2021-10-27 09:46:41 +01:00

python-config.patch

python3: udpate to 3.10.1

2021-12-12 11:27:24 +00:00

reformat_sysconfig.py

python3: Fix sysroot reproducibility

2021-10-01 14:51:45 +01:00

run-ptest

python3: use built-in distutils for ptest, rather than setuptools' 'fork'

2022-06-24 23:57:42 +01:00