diff mbox series

[wrynose,07/40] python3-babel: fix CVE_PRODUCT

Message ID	9ac57f02e908cb8a110463ed7018ab0fbc8d3211.1788629392.git.yoann.congal@smile.fr
State	RFC, archived
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.50, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 07/40] python3-babel: fix CVE_PRODUCT Date: Sat, 5 Sep 2026 22:44:08 +0200 Message-ID: <9ac57f02e908cb8a110463ed7018ab0fbc8d3211.1788629392.git.yoann.congal@smile.fr> In-Reply-To: <cover.1788629392.git.yoann.congal@smile.fr> References: <cover.1788629392.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/40] apt: mark CVE-2011-3374 as fixed-version \| expand [wrynose,01/40] apt: mark CVE-2011-3374 as fixed-version [wrynose,02/40] expat: set CVE_STATUS for CVE-2026-72522 [wrynose,03/40] python3-git: fix CVE-2026-42284 [wrynose,04/40] python3-git: fix CVE-2026-42215 [wrynose,05/40] python3-git: fix CVE-2026-44243 [wrynose,06/40] python3-git: fix CVE-2026-44244 [wrynose,07/40] python3-babel: fix CVE_PRODUCT [wrynose,08/40] python3-pycryptodome: fix CVE_PRODUCT [wrynose,09/40] python3-dbusmock: fix CVE_PRODUCT [wrynose,10/40] python3-wheel: fix CVE_PRODUCT [wrynose,11/40] python3-click: fix CVE_PRODUCT [wrynose,12/40] python3-attrs: fix CVE_PRODUCT [wrynose,13/40] python3-numpy: fix CVE_PRODUCT [wrynose,14/40] python3-pycryptodomex: fix CVE_PRODUCT [wrynose,15/40] python3-mako: upgrade 1.3.10 -> 1.3.12 [wrynose,16/40] gnutls: fix for CVE-2026-42011 [wrynose,17/40] gnutls: fix CVE-2026-42010 [wrynose,18/40] alsa-lib: patch CVE-2026-56109 [wrynose,19/40] libevent: upgrade 2.1.12 -> 2.1.13 [wrynose,20/40] libevent: set status for CVE-2026-63380 [wrynose,21/40] libxfont2: Fix CVE-2026-56001 [wrynose,22/40] libxfont2: Fix CVE-2026-56002 [wrynose,23/40] libxfont2: Fix CVE-2026-56003 [wrynose,24/40] util-linux: Fix CVE-2026-3184 [wrynose,25/40] python3: upgrade 3.14.6 -> 3.14.7 [wrynose,26/40] volatile-binds: order systemd-timesyncd after /var/lib [wrynose,27/40] go: upgrade 1.26.5 -> 1.26.6 [wrynose,28/40] python3: add missing pyc files to core [wrynose,29/40] python3: fix stringold cache files [wrynose,30/40] python3-git: fix CVE_PRODUCT [wrynose,31/40] binutils: stable 2.46 branch updates [wrynose,32/40] python3-click: upgrade 8.3.1 -> 8.3.3 [wrynose,33/40] python3-idna: Fix CVE-2026-45409 [wrynose,34/40] perl: fix CVE-2026-42496 and CVE-2026-42497 [wrynose,35/40] libssh2: Fix CVE-2026-58051 [wrynose,36/40] python3-cryptography: backport stray file install fix [wrynose,37/40] qemu: guard RESOLVE_CACHED strace flag [wrynose,38/40] util-linux: set status for CVE-2026-13595 [wrynose,39/40] go: upgrade 1.26.6 -> 1.26.7 [wrynose,40/40] scripts/install-buildtools: Update to 6.0.3

Commit Message

Yoann Congal Sept. 5, 2026, 8:44 p.m. UTC

From: Tim Orling <tim.orling@konsulko.com>

Recipe (PV): python3-babel (2.18.0)
Before -> After: python:babel -> pocoo:babel
Newly caught CVEs: CVE-2021-42771 (locale .dat deserialization RCE)
Status: patched (fixed 2.9.1)

AI-Generated: Claude Sonnet 5
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 134175fa92b85e639dc4646d9a88eeaba0fae4d3)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-devtools/python/python3-babel_2.18.0.bb | 2 ++
 1 file changed, 2 insertions(+)

diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-babel_2.18.0.bb b/meta/recipes-devtools/python/python3-babel_2.18.0.bb
index b0abb2c62e7..26847372bf3 100644
--- a/meta/recipes-devtools/python/python3-babel_2.18.0.bb
+++ b/meta/recipes-devtools/python/python3-babel_2.18.0.bb
@@ -7,6 +7,8 @@  SRC_URI[sha256sum] = "b80b99a14bd085fcacfa15c9165f651fbb3406e66cc603abf11c575093
 
 inherit pypi setuptools3
 
+CVE_PRODUCT = "pocoo:babel"
+
 S = "${UNPACKDIR}/babel-${PV}"
 
 CLEANBROKEN = "1"