From 4e29baa804edbb52d988bf3bcd44df2970f94b10 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Sat, 7 Feb 2026 11:33:53 +0100 Subject: python3-django: patch CVE-2025-64460 Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64460 Backport the patch that explicitly references this CVE in its commit message. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- meta-python/recipes-devtools/python/python3-django_5.0.14.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta-python/recipes-devtools/python/python3-django_5.0.14.bb') diff --git a/meta-python/recipes-devtools/python/python3-django_5.0.14.bb b/meta-python/recipes-devtools/python/python3-django_5.0.14.bb index d176123893..c2c44b4cc7 100644 --- a/meta-python/recipes-devtools/python/python3-django_5.0.14.bb +++ b/meta-python/recipes-devtools/python/python3-django_5.0.14.bb @@ -4,6 +4,7 @@ inherit setuptools3 # Windows-specific DoS via NFKC normalization, not applicable to Linux CVE_STATUS[CVE-2025-27556] = "not-applicable-platform: Issue only applies on Windows" +SRC_URI += "file://CVE-2025-64460.patch" SRC_URI[sha256sum] = "29019a5763dbd48da1720d687c3522ef40d1c61be6fb2fad27ed79e9f655bc11" RDEPENDS:${PN} += "\ -- cgit v1.2.3-54-g00ecf