]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
python3: upgrade 3.12.9 -> 3.12.11
authorPeter Marko <peter.marko@siemens.com>
Sun, 8 Jun 2025 21:43:27 +0000 (23:43 +0200)
committerSteve Sakoman <steve@sakoman.com>
Mon, 9 Jun 2025 15:06:42 +0000 (08:06 -0700)
commit6cca08b2857efd5481e837ecd6bb295cb8a99ee1
treef241cb8354729ff34db665a5744ccb1de1c16425
parent2f3d2a2848472bdf87fbce00967bc780fc859e05
python3: upgrade 3.12.9 -> 3.12.11

Drop upstreamed patch and refresh remaining patches.

* https://www.python.org/downloads/release/python-31210/

  Python 3.12.10 is the latest maintenance release of Python 3.12, and
  the last full maintenance release. Subsequent releases of 3.12 will be
  security-fixes only.

* https://www.python.org/downloads/release/python-31211/

  Security content in this release
  * gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330]
    [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed
    tarfile extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
  * gh-133767: Fix use-after-free in the “unicode-escape” decoder with a
    non-“strict” error handler.
  * gh-128840: Short-circuit the processing of long IPv6 addresses early
    in ipaddress to prevent excessive memory consumption and a minor
    denial-of-service.

gh-133767 got meawhile CVE-2025-4516 assigned.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/python/python3/0001-Avoid-shebang-overflow-on-python-config.py.patch
meta/recipes-devtools/python/python3/0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch
meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch
meta/recipes-devtools/python/python3/0001-ctypes-correct-gcc-check-in-test.patch [deleted file]
meta/recipes-devtools/python/python3/0001-gh-107811-tarfile-treat-overflow-in-UID-GID-as-failu.patch
meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch
meta/recipes-devtools/python/python3/0001-test_storlines-skip-due-to-load-variability.patch
meta/recipes-devtools/python/python3/makerace.patch
meta/recipes-devtools/python/python3_3.12.11.bb [moved from meta/recipes-devtools/python/python3_3.12.9.bb with 99% similarity]