mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-21 21:20:15 +00:00
Code Issues Projects Releases Wiki Activity
Files
scarthgap
poky/meta/recipes-devtools
T
History
Darsh Kelaiya c77dc0dfc3 python3-lxml: fix CVE-2026-41066 
This patch applies the upstream fix as referenced in [2], using the
commit shown in [1].

Regenerate etree.c with the matching Cython 3.0.9 release.  Keep the
iterparse source layout line-stable so that the generated diff contains
only the functional and documentation changes instead of unrelated
source-location updates.

[1] https://github.com/lxml/lxml/commit/ab431ea0b9a7357d968f1d1c5c614649e9aaf358
[2] https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw

(From OE-Core rev: 1ffb0b524d15aab153553e4739f7d8b697593b8a)

Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-09-21 08:53:17 +01:00
..
apt
apt: mark CVE-2011-3374 as not-applicable-config
2026-09-11 14:32:08 +01:00
autoconf
…
autoconf-archive
…
automake
automake: mark new_rt_path_for_test-driver.patch as Inappropriate
2024-08-01 06:08:09 -07:00
binutils
binutils: fix CVE-2026-4647
2026-09-21 08:53:17 +01:00
bison
bison: patch CVE-2026-56389
2026-08-28 09:52:24 +01:00
bootchart2
…
btrfs-tools
…
ccache
…
cdrtools
cdrtools-native: fix build with gcc-14
2024-06-20 06:29:44 -07:00
chrpath
…
cmake
cmake: backport a fix for gcc-16 on host
2026-05-04 13:57:32 +01:00
createrepo-c
…
debugedit
…
dejagnu
dejagnu: Fix LICENSE
2024-09-19 05:11:35 -07:00
desktop-file-utils
pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI
2024-10-02 06:15:15 -07:00
devel-config
…
diffstat
…
distcc
…
dmidecode
…
dnf
dnf: drop python3-iniparse from DEPENDS and RDEPENDS
2024-12-13 05:21:54 -08:00
docbook-xml
docbook-xml-dtd4: fix the fetching failure
2026-02-16 09:52:35 +00:00
dosfstools
…
dpkg
dpkg: Fix CVE-2026-2219
2026-06-26 16:55:54 +01:00
dwarfsrcfiles
…
e2fsprogs
e2fsprogs: Fix build failure with gcc 15
2025-08-22 05:59:55 -07:00
elfutils
elfutils: don't add -Werror to avoid discarded-qualifiers
2026-05-04 13:57:32 +01:00
erofs-utils
…
expect
expect: fix native build with GCC 15
2025-10-09 12:16:46 -07:00
fdisk
…
file
…
flex
flex: update CVE_PRODUCT
2026-08-24 11:43:45 +01:00
gcc
gcc: backport a fix for building with gcc-16
2026-05-04 13:57:32 +01:00
gdb
gdb: backport a patch to fix static_assert in recent GCC
2026-06-26 16:55:54 +01:00
git
buildtools-tarball: fix unbound variable issues under 'set -u'
2025-09-22 13:17:52 -07:00
gnu-config
…
go
go: Fix CVE-2026-39823
2026-09-21 08:53:17 +01:00
help2man
…
i2c-tools
…
icecc-create-env
…
icecc-toolchain
…
intltool
…
jquery
…
json-c
…
libcomps
…
libdnf
libdnf: upgrade 0.73.1 -> 0.73.2
2024-09-09 06:08:10 -07:00
libedit
libedit: Make docs generation deterministic
2024-09-19 05:11:35 -07:00
libmodulemd
…
librepo
…
libtool
nativesdk-libtool: sanitize the script, remove buildpaths
2025-03-26 08:48:51 -07:00
llvm
llvm: fix build with gcc-15
2025-09-30 08:01:59 -07:00
log4cplus
…
lua
…
m4
m4: Stick to C17 standard
2025-09-01 08:30:56 -07:00
make
…
makedevs
makedevs: Fix matching uid/gid
2024-10-18 06:04:41 -07:00
meson
meson: don't use deprecated pkgconfig variable
2024-07-17 05:36:14 -07:00
mmc
mmc-utils: fix URL
2024-07-26 07:43:46 -07:00
mtd
…
mtools
mtools: upgrade 4.0.48 -> 4.0.49
2025-07-29 07:59:53 -07:00
nasm
nasm: Upgrade 2.16.01 -> 2.16.03
2024-08-10 06:34:25 -07:00
ninja
ninja: fix build with python 3.13
2024-12-06 05:50:25 -08:00
opkg
…
opkg-utils
…
orc
orc: set CVE_PRODUCT
2025-07-29 07:59:52 -07:00
patch
patch: Fix CVE-2026-56288
2026-09-04 10:39:10 +01:00
patchelf
…
perl
perl: fix CVE-2025-40909
2026-09-04 10:39:10 +01:00
perl-cross
perl: fix CVE-2025-40909
2026-09-04 10:39:10 +01:00
pkgconf
pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH
2025-02-12 06:25:37 -08:00
pkgconfig
pkgconfig: fix build with gcc-15
2025-09-01 08:30:56 -07:00
pseudo
pseudo: Update to version 1.9.8
2026-06-26 16:55:53 +01:00
python
python3-lxml: fix CVE-2026-41066
2026-09-21 08:53:17 +01:00
qemu
qemu: Fix CVE-2026-2243
2026-07-20 09:04:32 +01:00
quilt
…
repo
…
rpm
rpm: keep leading `/' from sed operation
2025-09-09 09:08:09 -07:00
rsync
rsync: fix for CVE-2026-41035
2026-05-12 21:31:33 +01:00
ruby
ruby: Upgrade 3.3.5 -> 3.3.10
2025-12-31 07:49:31 -08:00
run-postinsts
run-postinsts.service: Removed --no-reload to fix reload warning when users execute systemctl in the first boot.
2024-06-14 05:19:22 -07:00
rust
cargo: Fix CVE-2026-5223
2026-07-20 09:04:32 +01:00
squashfs-tools
…
strace
strace: download release tarballs from GitHub
2024-11-26 06:11:30 -08:00
subversion
subversion: ignore CVE-2024-45720
2025-02-21 06:25:05 -08:00
swig
…
syslinux
…
systemd-bootchart
…
tcf-agent
tcf-agent: correct the SRC_URI
2025-07-07 07:42:58 -07:00
tcltk
tcl: skip http11 tests
2026-05-04 13:57:31 +01:00
unfs3
unfs3: Fix race issue causing a glibc test hang
2026-05-04 13:57:31 +01:00
unifdef
unifdef: Don't use C23 constexpr keyword
2025-09-01 08:30:56 -07:00
vala
…
valgrind
…
xmlto
xmlto: update SRC_URI
2026-07-22 21:08:55 +01:00