python3-twisted: Fix CVE-2026-42304

This patch applies the upstream 26.4.0rc2 backport for
CVE-2026-42304. The upstream fix merge is referenced in [1],
and the public CVE advisory is referenced in [2]. The individual
backported commit links are recorded in the embedded patch header
because the fix expands to multiple commits.

[1] https://github.com/twisted/twisted/commit/2d196123264efb0027eecfe1b430be4a9babdbd8
[2] https://github.com/advisories/GHSA-grgv-6hw6-v9g4

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Hetvi Thakar
2026-08-12 09:35:12 +05:30
committed by Anuj Mittal
parent 3c9dd88058
commit 35f85f87b8
2 changed files with 370 additions and 1 deletions
@@ -9,6 +9,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=c1c5d2c2493b848f83864bdedd67bbf5"
SRC_URI += " \
file://CVE-2024-41671.patch \
file://CVE-2024-41810.patch \
file://CVE-2026-42304.patch \
"
SRC_URI[sha256sum] = "6b38b6ece7296b5e122c9eb17da2eeab3d98a198f50ca9efd00fb03e5b4fd4ae"
@@ -178,4 +179,3 @@ FILES:${PN}-pair = " \
FILES:${PN}-doc += " \
${PYTHON_SITEPACKAGES_DIR}/twisted/python/_pydoctortemplates \
"