Benjamin Robin (Schneider Electric) ca405952dc python3: fix CVE-2026-11940 ...

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed
by a crafted archive where a hardlink references a symlink stored at a
deeper name than the hardlink itself.

(From OE-Core rev: a76513212f1830fbda2dc6a243943a3c1a011239)

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-07-22 21:08:54 +01:00

..

classes

meta/lib/oe/package.py: fix path to kernel sources in save_debugsources_info

2026-06-16 20:42:20 +01:00

classes-global

classes/base: prefer gnu-prefixed HOSTTOOLS

2026-06-10 14:35:20 +01:00

classes-recipe

create-spdx-image-3.0: correct SSTATE_SKIP_CREATION key for do_create_image_sbom_spdx

2026-07-22 21:08:54 +01:00

conf

conf/machine: fix typos in ARM and x86 README files

2026-06-19 12:49:07 +01:00

files

meta/files/layers.example.json: switch to https clone URIs

2026-05-04 13:57:32 +01:00

lib

oeqa: Drop /git/ from our urls

2026-07-02 13:42:26 +01:00

recipes-bsp

grub/glibc: Bump versions to resolve hashequiv/reproducibility issues

2026-07-02 13:42:25 +01:00

recipes-connectivity

bind: Upgrade 9.18.44 -> 9.18.49

2026-07-22 21:08:54 +01:00

recipes-core

glibc: stable 2.39 branch updates

2026-07-22 21:08:54 +01:00

recipes-devtools

python3: fix CVE-2026-11940

2026-07-22 21:08:54 +01:00

recipes-extended

sudo: fix pam-wheel sed for sudo 1.9.17p2 sudoers

2026-07-20 09:04:31 +01:00

recipes-gnome

gdk-pixbuf: Fix CVE-2026-5201

2026-05-12 21:31:34 +01:00

recipes-graphics

xwayland: Fix CVE-2026-34003

2026-07-02 13:42:26 +01:00

recipes-kernel

linux-yocto/6.6: update CVE exclusions (6.6.142)

2026-07-20 09:04:32 +01:00

recipes-multimedia

tiff: fix CVE-2026-4775

2026-06-26 16:55:53 +01:00

recipes-rt

rt-tests: rt_bmark.py: fix TypeError

2024-08-06 19:11:18 -07:00

recipes-sato

webkitgtk: upgrade 2.44.3 -> 2.44.4

2025-11-14 06:45:29 -08:00

recipes-support

libgcrypt: upgrade 1.10.3 -> 1.10.4

2026-07-20 09:04:33 +01:00

site

site: remove at-spi2-core values

2023-09-02 07:45:29 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00