mbox series

[meta-python,wrynose,0/9] python3-pyjwt: Security fixes

Message ID 20261016023322.344365-1-hthakar@cisco.com
Headers show
Series python3-pyjwt: Security fixes | expand

Message

Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) Oct. 16, 2026, 2:33 a.m. UTC 
From: Hetvi Thakar <hthakar@cisco.com>

  Use this body before the automatically generated patch list and diffstat:

  This series backports the upstream PyJWT security fixes for the
  following CVEs to python3-pyjwt 2.12.1:

  - CVE-2026-101917
  - CVE-2026-101918
  - CVE-2026-102267
  - CVE-2026-102268
  - CVE-2026-102269
  - CVE-2026-102270
  - CVE-2026-102271
  - CVE-2026-102274
  - CVE-2026-102275
  - CVE-2026-103001

  CVE-2026-102268 and CVE-2026-102270 are addressed by the same
  upstream commit and are therefore included in one patch.

  Each fix was selected from the upstream commit referenced by its
  corresponding PyJWT security advisory.

  Validation performed:

  - The complete series applies cleanly to the Wrynose branch.
  - bitbake python3-pyjwt -c patch -f completed successfully.
  - bitbake core-image-minimal completed successfully.

Hetvi Thakar (9):
  python3-pyjwt: fix CVE-2026-103001
  python3-pyjwt: fix CVE-2026-102274
  python3-pyjwt: fix CVE-2026-102269
  python3-pyjwt: fix CVE-2026-102267
  python3-pyjwt: fix CVE-2026-102268 and CVE-2026-102270
  python3-pyjwt: fix CVE-2026-102271
  python3-pyjwt: fix CVE-2026-101917
  python3-pyjwt: fix CVE-2026-102275
  python3-pyjwt: fix CVE-2026-101918

 .../python/files/CVE-2026-101917.patch        | 311 ++++++++++++++++++
 .../python/files/CVE-2026-101918.patch        | 122 +++++++
 .../python/files/CVE-2026-102267.patch        | 223 +++++++++++++
 .../CVE-2026-102268_CVE-2026-102270.patch     | 113 +++++++
 .../python/files/CVE-2026-102269.patch        | 133 ++++++++
 .../python/files/CVE-2026-102271.patch        | 136 ++++++++
 .../python/files/CVE-2026-102274.patch        |  63 ++++
 .../python/files/CVE-2026-102275.patch        |  82 +++++
 .../python/files/CVE-2026-103001.patch        | 128 +++++++
 .../python/python3-pyjwt_2.12.1.bb            |  10 +-
 10 files changed, 1320 insertions(+), 1 deletion(-)
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-101917.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-101918.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-102267.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-102268_CVE-2026-102270.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-102269.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-102271.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-102274.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-102275.patch
 create mode 100644 meta-python/recipes-devtools/python/files/CVE-2026-103001.patch