From 3b6292cfbef8b60750071da92ccb91d50a63c2be Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Sat, 11 Apr 2026 23:14:48 +1200 Subject: python3-tornado: fix CVE-2026-35536 Backport the commit[1] from version 6.5.5 which fixes this vulnerability according to the NVD[2]. [1] https://github.com/tornadoweb/tornado/commit/24a2d96ea115f663b223887deb0060f13974c104 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-35536 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb') diff --git a/meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb b/meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb index 3dabcab38b..25f1b2a310 100644 --- a/meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb +++ b/meta-python/recipes-devtools/python/python3-tornado_6.4.2.bb @@ -11,6 +11,7 @@ SRC_URI[sha256sum] = "92bad5b4746e9879fd7bf1eb21dce4e3fc5128d71601f80005afa39237 SRC_URI += "file://CVE-2025-47287.patch \ file://CVE-2025-67724.patch \ file://CVE-2025-67726.patch \ + file://CVE-2026-35536.patch \ " inherit pypi python_setuptools_build_meta -- cgit v1.2.3-54-g00ecf