<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/python/python3/CVE-2022-42919.patch, branch yocto-4.0.7</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-4.0.7</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-4.0.7'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2022-12-23T23:05:50+00:00</updated>
<entry>
<title>python3: upgrade 3.10.8 -&gt; 3.10.9</title>
<updated>2022-12-23T23:05:50+00:00</updated>
<author>
<name>Florin Diaconescu</name>
<email>florin.diaconescu009@gmail.com</email>
</author>
<published>2022-12-15T11:42:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c4bbc6d9c5077b26d6d8e48aa47927b3cbb023e0'/>
<id>urn:sha1:c4bbc6d9c5077b26d6d8e48aa47927b3cbb023e0</id>
<content type='text'>
Security and bug fixes.

Drop patch for CVE-2022-42919 and CVE-2022-37454 which were merged in 3.10.9

Fixes:
* CVE-2022-45061 (gh-98433)
  https://nvd.nist.gov/vuln/detail/CVE-2022-45061

List of changes:
https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-9-final

(From OE-Core rev: f98b9c71686eb5ce5115ee73155a7d0389831ef0)

Signed-off-by: Florin Diaconescu &lt;florin.diaconescu009@gmail.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2022-42919 local privilege escalation via the multiprocessing forkserver start method</title>
<updated>2022-12-01T19:35:04+00:00</updated>
<author>
<name>Vivek Kumbhar</name>
<email>vkumbhar@mvista.com</email>
</author>
<published>2022-11-24T12:28:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9510218414f822d1d5fd4b8417137d8ef1de81ff'/>
<id>urn:sha1:9510218414f822d1d5fd4b8417137d8ef1de81ff</id>
<content type='text'>
Upstream-Status: Backport from https://github.com/python/cpython/commit/eae692eed18892309bcc25a2c0f8980038305ea2

(From OE-Core rev: 9ed7184930707c98afabca8c6b712df874ad659f)

Signed-off-by: Vivek Kumbhar &lt;vkumbhar@mvista.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
