python3-twisted: Fix CVE-2026-42304

This patch applies the upstream 26.4.0rc2 backport for
CVE-2026-42304. The upstream fix merge is referenced in [1],
and the public CVE advisory is referenced in [2]. The individual
backported commit links are recorded in the patch headers.

[1] https://github.com/twisted/twisted/commit/2d196123264efb0027eecfe1b430be4a9babdbd8
[2] https://github.com/advisories/GHSA-grgv-6hw6-v9g4

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Hetvi Thakar
2026-08-24 12:58:53 +05:30
committed by Anuj Mittal
parent 8519105eec
commit 2fb2b9fb1d
7 changed files with 929 additions and 0 deletions
@@ -6,6 +6,14 @@ HOMEPAGE = "https://twisted.org"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=5316a448a61a38d722c291f78d915d11"
SRC_URI += "file://CVE-2026-42304_p1.patch \
file://CVE-2026-42304_p2.patch \
file://CVE-2026-42304_p3.patch \
file://CVE-2026-42304_p4.patch \
file://CVE-2026-42304_p5.patch \
file://CVE-2026-42304_p6.patch \
"
SRC_URI[sha256sum] = "1deb272358cb6be1e3e8fc6f9c8b36f78eb0fa7c2233d2dbe11ec6fee04ea316"
CVE_PRODUCT = "twisted"