diff options
| author | Peter Marko <peter.marko@siemens.com> | 2025-06-08 23:54:36 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-06-13 09:01:26 -0700 |
| commit | 5e9c6deafb62658bf87fde324ce1bef0ac34d2e3 (patch) | |
| tree | fe8b7fd605dbd312db5c14280334e6ce23c63e6d /documentation/conf.py | |
| parent | d5c9b8a1d6c44d4fbf97e33419f29625fedb3a90 (diff) | |
| download | poky-5e9c6deafb62658bf87fde324ce1bef0ac34d2e3.tar.gz | |
python3: upgrade 3.13.3 -> 3.13.4
Refresh patches.
* https://www.python.org/downloads/release/python-3134/
Security content in this release
* gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330]
[CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed
tarfile extraction filters (filter="data" and filter="tar") to be
bypassed using crafted symlinks and hard links.
* gh-133767: Fix use-after-free in the “unicode-escape” decoder with a
non-“strict” error handler.
* gh-128840: Short-circuit the processing of long IPv6 addresses early
in ipaddress to prevent excessive memory consumption and a minor
denial-of-service.
gh-133767 got meawhile CVE-2025-4516 assigned.
(From OE-Core rev: 55a9cd748531c75d46f5d6d53af692a38c6b6716)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'documentation/conf.py')
0 files changed, 0 insertions, 0 deletions