mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-26 00:11:04 +00:00
Code Issues Projects Releases Wiki Activity

python3-twisted: Fix CVE-2026-42304

Browse Source 
This patch applies the upstream 26.4.0rc2 backport for
CVE-2026-42304. The upstream fix merge is referenced in [1],
and the public CVE advisory is referenced in [2]. The individual
backported commit links are recorded in the patch headers.

[1] https://github.com/twisted/twisted/commit/2d196123264efb0027eecfe1b430be4a9babdbd8
[2] https://github.com/advisories/GHSA-grgv-6hw6-v9g4

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Hetvi Thakar
2026-08-24 12:58:53 +05:30
committed by Anuj Mittal
parent 8519105eec
commit 2fb2b9fb1d
7 changed files with 929 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/files/CVE-2026-42304_p6.patch
+23
View File
@@ -0,0 +1,23 @@
From 2dc37caa8af3559e14fc1a1b36b049851d36943c Mon Sep 17 00:00:00 2001
From: Adi Roiban <adiroiban@gmail.com>
Date: Wed, 29 Apr 2026 15:55:05 +0100
Subject: [PATCH] Update src/twisted/names/newsfragments/12626.bugfix
CVE: CVE-2026-42304
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/9ca319ebf61386dd33354c4ade3946ef84ad58fb]
(cherry picked from commit 9ca319ebf61386dd33354c4ade3946ef84ad58fb)
Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
---
src/twisted/names/newsfragments/12626.bugfix | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/twisted/names/newsfragments/12626.bugfix b/src/twisted/names/newsfragments/12626.bugfix
index 44896c3e5..179b92d83 100644
--- a/src/twisted/names/newsfragments/12626.bugfix
+++ b/src/twisted/names/newsfragments/12626.bugfix
@@ -1 +1 @@
-twisted.names was fix for Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. CVE-REFERENCE HERE
\ No newline at end of file
+twisted.names was fix for Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. CVE-2026-42304
\ No newline at end of file