From: Benjamin Robin Date: Fri, 10 Jul 2026 07:48:13 +0000 (+0200) Subject: python3: add back Co-authored-by in CVE-2026-11972 patch X-Git-Tag: yocto-6.1_M2~198 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b470a748002e6c5a4dcd4cd6022d01427d31639d;p=thirdparty%2Fopenembedded%2Fopenembedded-core.git python3: add back Co-authored-by in CVE-2026-11972 patch It had been deleted by mistake due to a lack of knowledge regarding how to handle it. Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-devtools/python/python3/CVE-2026-11972.patch b/meta/recipes-devtools/python/python3/CVE-2026-11972.patch index 7dc9c66971..12a79754fe 100644 --- a/meta/recipes-devtools/python/python3/CVE-2026-11972.patch +++ b/meta/recipes-devtools/python/python3/CVE-2026-11972.patch @@ -4,6 +4,8 @@ Date: Tue, 23 Jun 2026 15:13:30 +0200 Subject: [PATCH 2/2] gh-151981: Make tarfile._Stream.seek break at EOF (GH-151982) +Co-authored-by: Stan Ulbrych + CVE: CVE-2026-11972 Upstream-Status: Backport [https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896]