Ross Burton 1a099cb1fa python3-requests: backport fix for CVE-2026-25645 ...

When unpacking zip files requests uses predictable paths. Backport a fix
to use randomly generated pathnames to mitigate injection attacks.

(From OE-Core rev: b23ec9773d67f8767904731afa86fe5ede08f97f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fe846d71b647fb06e6a87cb45a2dd9b0889e2891)
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-06-10 14:35:20 +01:00

..

CVE-2026-25645.patch

python3-requests: backport fix for CVE-2026-25645

2026-06-10 14:35:20 +01:00

environment.d-python3-requests.sh

buildtools-tarball: fix unbound variable issues under 'set -u'

2025-09-22 13:17:52 -07:00