From 07810b11ef35d12cdb2d77f07464562f6a2011ca Mon Sep 17 00:00:00 2001 From: Anil Dongare Date: Fri, 7 Nov 2025 02:21:15 -0800 Subject: python3-django 5.0.11: Fix CVE-2025-26699 Upstream Repository: https://github.com/django/django.git Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2025-26699 Type: Security Fix CVE: CVE-2025-26699 Score: 7.5 Patch: https://github.com/django/django/commit/e88f7376fe68 Signed-off-by: Anil Dongare Signed-off-by: Anuj Mittal --- meta-python/recipes-devtools/python/python3-django_5.0.11.bb | 2 ++ 1 file changed, 2 insertions(+) (limited to 'meta-python/recipes-devtools/python/python3-django_5.0.11.bb') diff --git a/meta-python/recipes-devtools/python/python3-django_5.0.11.bb b/meta-python/recipes-devtools/python/python3-django_5.0.11.bb index 43be30c7ec..0d26c7928d 100644 --- a/meta-python/recipes-devtools/python/python3-django_5.0.11.bb +++ b/meta-python/recipes-devtools/python/python3-django_5.0.11.bb @@ -4,6 +4,8 @@ inherit setuptools3 # Windows-specific DoS via NFKC normalization, not applicable to Linux CVE_STATUS[CVE-2025-27556] = "not-applicable-platform: Issue only applies on Windows" +SRC_URI = "file://CVE-2025-26699.patch \ + " SRC_URI[sha256sum] = "e7d98fa05ce09cb3e8d5ad6472fb602322acd1740bfdadc29c8404182d664f65" RDEPENDS:${PN} += "\ -- cgit v1.2.3-54-g00ecf