Files
poky/meta/recipes-devtools
Benjamin Robin (Schneider Electric) ca405952dc python3: fix CVE-2026-11940
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed
by a crafted archive where a hardlink references a symlink stored at a
deeper name than the hardlink itself.

(From OE-Core rev: a76513212f1830fbda2dc6a243943a3c1a011239)

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-07-22 21:08:54 +01:00
..
2024-01-21 12:27:12 +00:00
2026-07-22 21:08:54 +01:00
2023-07-30 07:54:44 +01:00
2024-03-01 09:28:51 +00:00
2024-09-19 05:11:35 -07:00
2024-02-03 22:08:26 +00:00
2023-05-05 11:07:25 +01:00
2026-06-26 16:55:54 +01:00
2025-11-03 07:17:01 -08:00
2026-07-02 13:42:25 +01:00
2023-09-26 10:35:27 +01:00
2023-12-02 17:18:57 +00:00
2024-09-09 06:08:10 -07:00
2024-03-07 17:25:02 +00:00
2025-09-30 08:01:59 -07:00
2023-06-27 16:23:40 +01:00
2025-09-01 08:30:56 -07:00
2023-03-11 00:08:41 +00:00
2024-10-18 06:04:41 -07:00
2024-07-26 07:43:46 -07:00
2023-09-26 10:35:27 +01:00
2025-07-29 07:59:53 -07:00
2024-08-10 06:34:25 -07:00
2024-12-06 05:50:25 -08:00
2025-07-29 07:59:52 -07:00
2026-07-20 09:04:32 +01:00
2025-05-02 08:20:11 -07:00
2026-06-26 16:55:53 +01:00
2026-07-22 21:08:54 +01:00
2026-07-20 09:04:32 +01:00
2024-03-07 17:25:03 +00:00
2026-05-12 21:31:33 +01:00
2025-12-31 07:49:31 -08:00
2026-07-20 09:04:32 +01:00
2024-03-01 09:28:52 +00:00
2025-07-07 07:42:58 -07:00
2026-05-04 13:57:31 +01:00
2024-03-18 12:21:45 +00:00