diff mbox series

[blacksail] python3: set status of CVE-2026-19672

Message ID 20261108213359.2976731-1-peter.marko@siemens.com
State New
Headers show
Series [blacksail] python3: set status of CVE-2026-19672 | expand

Commit Message

Peter Marko Nov. 8, 2026, 9:33 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

CVE DB has this CVE as fixed in 3.16, backports to older releases is not
recognized.
Exact commits and their tags can be found in [1].
For 3.14 branch it's v3.14.8.

[1] https://security-tracker.debian.org/tracker/CVE-2026-19672

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-devtools/python/python3_3.14.10.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3_3.14.10.bb b/meta/recipes-devtools/python/python3_3.14.10.bb
index 3dd0962ad9..a67bf666e0 100644
--- a/meta/recipes-devtools/python/python3_3.14.10.bb
+++ b/meta/recipes-devtools/python/python3_3.14.10.bb
@@ -41,6 +41,8 @@  inherit upstream-stable-release-point
 
 CVE_PRODUCT = "python:python python_software_foundation:python cpython"
 
+CVE_STATUS[CVE-2026-19672] = "cpe-stable-backport: Fixed from version 3.14.8"
+
 PYTHON_MAJMIN = "3.14"
 
 S = "${UNPACKDIR}/Python-${PV}"