linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209-pre1.patch, branch scarthgapMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap2026-04-03T09:30:47+00:00python3-cbor2: patch CVE-2026-262092026-04-03T09:30:47+00:00Hitendra Prajapatihprajapati@mvista.com2026-03-31T06:15:06+00:00urn:sha1:4810cd8c5bbc0b4349a78eac85a6a882bc0b03a2
Backport the patch[1] which fixes this vulnerability as mentioned in the
comment[3].
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-26209
[1] https://github.com/agronholm/cbor2/commit/e61a5f365ba610d5907a0ae1bc72769bba34294b
[2] https://github.com/agronholm/cbor2/commit/fb4ee1612a8a1ac0dbd8cf2f2f6f931a4e06d824 (pre patch)
[3] https://github.com/agronholm/cbor2/pull/275
Dropped changes to the changelog from the original commit.
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>