mbox series

[wrynose,0/27] python3-git: Security fixes

Message ID 20261016054106.210444-1-yurade@cisco.com
Headers show
Series python3-git: Security fixes | expand

Message

Yogita Urade Oct. 16, 2026, 5:40 a.m. UTC 
Backport 27 GitPython security fixes covering 28 CVEs to the python3-git
3.1.43 recipe on wrynose. The series adds the fixes as patches and updates
the recipe to apply them.

CVE-2026-78678 and CVE-2026-78679 are addressed together. The CVE-2026-76222
fix includes a regression correction and follow-up patch, and the CVE-2026-87819
fix is carried in two patches. The patches retain upstream references.

Yogita Urade (27):
  python3-git: fix CVE-2026-67326
  python3-git: fix CVE-2026-67323
  python3-git: fix CVE-2026-67325
  python3-git: fix CVE-2026-67324
  python3-git: fix CVE-2026-67322
  python3-git: fix CVE-2026-69097
  python3-git: fix CVE-2026-73625
  python3-git: fix CVE-2026-73623
  python3-git: fix CVE-2026-73624
  python3-git: fix CVE-2026-73622
  python3-git: fix CVE-2026-73621
  python3-git: fix CVE-2026-73620
  python3-git: fix CVE-2026-73619
  python3-git: fix CVE-2026-76221
  python3-git: fix CVE-2026-76220
  python3-git: fix CVE-2026-76219
  python3-git: fix CVE-2026-76218
  python3-git: fix CVE-2026-76217
  python3-git: fix CVE-2026-76222
  python3-git: fix CVE-2026-78678 CVE-2026-78679
  python3-git: fix CVE-2026-78677
  python3-git: fix CVE-2026-78676
  python3-git: fix CVE-2026-78675
  python3-git: fix CVE-2026-87817
  python3-git: fix CVE-2026-87818
  python3-git: Fix CVE-2026-87819
  python3-git: fix CVE-2026-100689

 .../python/python3-git/CVE-2026-100689.patch       |  90 +++++
 .../python/python3-git/CVE-2026-67322.patch        | 167 +++++++++
 .../python/python3-git/CVE-2026-67323.patch        | 356 +++++++++++++++++++
 .../python/python3-git/CVE-2026-67324.patch        | 101 ++++++
 .../python/python3-git/CVE-2026-67325_p1.patch     |  49 +++
 .../python/python3-git/CVE-2026-67325_p2.patch     |  50 +++
 .../python/python3-git/CVE-2026-67326.patch        | 108 ++++++
 .../python/python3-git/CVE-2026-69097.patch        |  48 +++
 .../python/python3-git/CVE-2026-73619.patch        |  58 +++
 .../python/python3-git/CVE-2026-73620.patch        | 130 +++++++
 .../python/python3-git/CVE-2026-73621.patch        |  72 ++++
 .../python/python3-git/CVE-2026-73622.patch        |  60 ++++
 .../python/python3-git/CVE-2026-73623.patch        |  53 +++
 .../python/python3-git/CVE-2026-73624.patch        | 139 ++++++++
 .../python/python3-git/CVE-2026-73625.patch        |  59 +++
 .../python/python3-git/CVE-2026-76217.patch        | 179 ++++++++++
 .../python/python3-git/CVE-2026-76218.patch        |  94 +++++
 .../python/python3-git/CVE-2026-76219.patch        | 155 ++++++++
 .../python/python3-git/CVE-2026-76220.patch        |  67 ++++
 .../python/python3-git/CVE-2026-76221.patch        |  44 +++
 .../python3-git/CVE-2026-76222-regression.patch    |  39 ++
 .../python/python3-git/CVE-2026-76222_p1.patch     | 120 +++++++
 .../python/python3-git/CVE-2026-76222_p2.patch     |  47 +++
 .../python/python3-git/CVE-2026-78675.patch        |  47 +++
 .../python/python3-git/CVE-2026-78676.patch        |  54 +++
 .../python/python3-git/CVE-2026-78677.patch        |  86 +++++
 .../CVE-2026-78678_CVE-2026-78679.patch            | 181 ++++++++++
 .../python/python3-git/CVE-2026-87817.patch        | 394 +++++++++++++++++++++
 .../python/python3-git/CVE-2026-87818.patch        |  55 +++
 .../python/python3-git/CVE-2026-87819_p1.patch     |  77 ++++
 .../python/python3-git/CVE-2026-87819_p2.patch     | 139 ++++++++
 meta/recipes-devtools/python/python3-git_3.1.43.bb |  31 ++
 32 files changed, 3349 insertions(+)

--
2.35.6