Amaury Couderc f47c0cb3bf python3: fix CVE-2026-4224 ...

Backport patch to fix CVE-2026-4224.
https://nvd.nist.gov/vuln/detail/CVE-2026-4224

Upstream fix:
  https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785

Tested with ptest:
Before: PASSED: 40007, FAILED: 0, SKIPPED: 1877
After: PASSED: 40006, FAILED: 0, SKIPPED: 1877

(From OE-Core rev: 736dd8c8f90d43e4bcdb0954a99764a62fccc20e)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-07-02 13:42:26 +01:00

..

apt

apt: Add CVE_PRODUCT to support product name

2026-05-12 21:31:34 +01:00

autoconf

…

autoconf-archive

…

automake

automake: mark new_rt_path_for_test-driver.patch as Inappropriate

2024-08-01 06:08:09 -07:00

binutils

binutils: Fix CVE-2025-69644

2026-06-26 16:55:53 +01:00

bison

…

bootchart2

…

btrfs-tools

…

ccache

…

cdrtools

cdrtools-native: fix build with gcc-14

2024-06-20 06:29:44 -07:00

chrpath

…

cmake

cmake: backport a fix for gcc-16 on host

2026-05-04 13:57:32 +01:00

createrepo-c

…

debugedit

…

dejagnu

dejagnu: Fix LICENSE

2024-09-19 05:11:35 -07:00

desktop-file-utils

pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI

2024-10-02 06:15:15 -07:00

devel-config

…

diffstat

…

distcc

…

dmidecode

…

dnf

dnf: drop python3-iniparse from DEPENDS and RDEPENDS

2024-12-13 05:21:54 -08:00

docbook-xml

docbook-xml-dtd4: fix the fetching failure

2026-02-16 09:52:35 +00:00

dosfstools

…

dpkg

dpkg: Fix CVE-2026-2219

2026-06-26 16:55:54 +01:00

dwarfsrcfiles

…

e2fsprogs

e2fsprogs: Fix build failure with gcc 15

2025-08-22 05:59:55 -07:00

elfutils

elfutils: don't add -Werror to avoid discarded-qualifiers

2026-05-04 13:57:32 +01:00

erofs-utils

…

expect

expect: fix native build with GCC 15

2025-10-09 12:16:46 -07:00

fdisk

…

file

…

flex

flex: fix build with gcc-15 on host

2025-11-03 07:17:01 -08:00

gcc

gcc: backport a fix for building with gcc-16

2026-05-04 13:57:32 +01:00

gdb

gdb: backport a patch to fix static_assert in recent GCC

2026-06-26 16:55:54 +01:00

git

buildtools-tarball: fix unbound variable issues under 'set -u'

2025-09-22 13:17:52 -07:00

gnu-config

…

go

go: patch CVE-2026-27145

2026-07-02 13:42:25 +01:00

help2man

…

i2c-tools

…

icecc-create-env

…

icecc-toolchain

…

intltool

…

jquery

…

json-c

…

libcomps

…

libdnf

libdnf: upgrade 0.73.1 -> 0.73.2

2024-09-09 06:08:10 -07:00

libedit

libedit: Make docs generation deterministic

2024-09-19 05:11:35 -07:00

libmodulemd

…

librepo

…

libtool

nativesdk-libtool: sanitize the script, remove buildpaths

2025-03-26 08:48:51 -07:00

llvm

llvm: fix build with gcc-15

2025-09-30 08:01:59 -07:00

log4cplus

…

lua

…

m4

m4: Stick to C17 standard

2025-09-01 08:30:56 -07:00

make

…

makedevs

makedevs: Fix matching uid/gid

2024-10-18 06:04:41 -07:00

meson

meson: don't use deprecated pkgconfig variable

2024-07-17 05:36:14 -07:00

mmc

mmc-utils: fix URL

2024-07-26 07:43:46 -07:00

mtd

…

mtools

mtools: upgrade 4.0.48 -> 4.0.49

2025-07-29 07:59:53 -07:00

nasm

nasm: Upgrade 2.16.01 -> 2.16.03

2024-08-10 06:34:25 -07:00

ninja

ninja: fix build with python 3.13

2024-12-06 05:50:25 -08:00

opkg

…

opkg-utils

…

orc

orc: set CVE_PRODUCT

2025-07-29 07:59:52 -07:00

patch

…

patchelf

…

perl

libxml-parser-perl: fix for CVE-2006-10003

2026-06-19 12:49:08 +01:00

perl-cross

perlcross: 1.6 -> 1.6.2

2025-05-02 08:20:11 -07:00

pkgconf

pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH

2025-02-12 06:25:37 -08:00

pkgconfig

pkgconfig: fix build with gcc-15

2025-09-01 08:30:56 -07:00

pseudo

pseudo: Update to version 1.9.8

2026-06-26 16:55:53 +01:00

python

python3: fix CVE-2026-4224

2026-07-02 13:42:26 +01:00

qemu

qemu: Fix CVE-2024-6519

2026-06-26 16:55:53 +01:00

quilt

…

repo

…

rpm

rpm: keep leading `/' from sed operation

2025-09-09 09:08:09 -07:00

rsync

rsync: fix for CVE-2026-41035

2026-05-12 21:31:33 +01:00

ruby

ruby: Upgrade 3.3.5 -> 3.3.10

2025-12-31 07:49:31 -08:00

run-postinsts

run-postinsts.service: Removed --no-reload to fix reload warning when users execute systemctl in the first boot.

2024-06-14 05:19:22 -07:00

rust

rust,libstd-rs: set status for CVE-2024-3566

2026-06-26 16:55:54 +01:00

squashfs-tools

…

strace

strace: download release tarballs from GitHub

2024-11-26 06:11:30 -08:00

subversion

subversion: ignore CVE-2024-45720

2025-02-21 06:25:05 -08:00

swig

…

syslinux

…

systemd-bootchart

…

tcf-agent

tcf-agent: correct the SRC_URI

2025-07-07 07:42:58 -07:00

tcltk

tcl: skip http11 tests

2026-05-04 13:57:31 +01:00

unfs3

unfs3: Fix race issue causing a glibc test hang

2026-05-04 13:57:31 +01:00

unifdef

unifdef: Don't use C23 constexpr keyword

2025-09-01 08:30:56 -07:00

vala

…

valgrind

…

xmlto

…