[meta-oe,wrynose,0/6] python3-tornado: Security fixes

Message ID	20261105070819.2086816-1-yurade@cisco.com
Headers	show Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.28856.1793862501882047726 for <openembedded-devel@lists.openembedded.org>; Wed, 04 Nov 2026 23:08:22 -0800 ip: 173.37.86.72, mailfrom: yurade@cisco.com) IronPort-Data: A9a23:eSHLbqxtranBjwF2iwZ6t+dhxyrEfRIJ4+MujC+fZmUNrF6WrkUCy DQWXDiDaareYDenKdl2b4u3phxV68eAmIcwSABs+VhgHilAwSbn6Xt1DatR0we6dJCroJdPt p1GAjX4BJlqCCKa/lHyYuCJQUBUjcmgXqD7BPPPJhd/TAplTDZJoR94kobVuKYw6TSCK13L4 4yaT/H3Ygf/hWctaj5MscpvlTs21BjMkGJA1rABTagjUG/2zxE9EJ8ZLKetGHr0KqE8NvK6X evK0Iai9Wrf+Ro3Yvv9+losWhRXKlJ6FVHmZkt+A8BOsDAbzsAB+vpT2M4nVKtio27hc+adZ zl6ncfYpQ8BZsUgkQmGOvVSO3kW0aZuoNcrLZUj2CCe5xWuTpfi/xlhJEduHpYC0KFJPVhD6 e0SEgkGYzbanf3jldpXSsE07igiBNPgMIVavjRryivUSK57B5vCWK7No9Rf2V/chOgXQq2YP JVfM2cyKk2cOXWjOX9PYH46tPa1nHDzfhVTqUmeouw85G27IAlZjeSxa4KJK4zVLSlTtli1q T3qx2TYPhRAL/2EkguHqGmulNaayEsXX6pXTtVU7MVCh0WewGEWAhAaWVa35PW0lEO6c9ZeM FAPvC02oK4/8UamQtXwU1u/unHsg/IHc8BbH+t/7ESGzbDZpl7EQGMFVTVGLtchsafaWAAX6 7NApPuxbRQHjVFfYSj1Gmu8xd9qBRUoEA== IronPort-HdrOrdr: A9a23:GWzOLK62c3R1eGeKAQPXwPjXdLJyesId70hD6qkXc202TiX2ra 6TdZgguCMc6wxhO03I5+rgBEDoexq1nvRICOIqUotKMjOLhILRFuFfxLqn5SH8ECvj8eMY/6 Jhf69iTODUNzFB/KPHCM3SKadG/DFBm5rY4dvj8w== From: Yogita Urade <yurade@cisco.com> To: openembedded-devel@lists.openembedded.org Subject: [oe][meta-oe][wrynose][PATCH 0/6] python3-tornado: Security fixes Date: Wed, 4 Nov 2026 23:08:13 -0800 Message-Id: <20261105070819.2086816-1-yurade@cisco.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8"
Series	python3-tornado: Security fixes \| expand [meta-oe,wrynose,0/6] python3-tornado: Security fixes [meta-oe,wrynose,1/6] python3-tornado: Fix CVE-2026-103261 [meta-oe,wrynose,2/6] python3-tornado: Fix CVE-2026-103262 [meta-oe,wrynose,3/6] python3-tornado: Fix CVE-2026-103263 [meta-oe,wrynose,4/6] python3-tornado: Fix CVE-2026-115927 [meta-oe,wrynose,5/6] python3-tornado: Fix CVE-2026-116577 [meta-oe,wrynose,6/6] python3-tornado: Fix CVE-2026-116578

Message ID

20261105070819.2086816-1-yurade@cisco.com

Headers

IronPort-Data: A9a23:eSHLbqxtranBjwF2iwZ6t+dhxyrEfRIJ4+MujC+fZmUNrF6WrkUCy
 DQWXDiDaareYDenKdl2b4u3phxV68eAmIcwSABs+VhgHilAwSbn6Xt1DatR0we6dJCroJdPt
 p1GAjX4BJlqCCKa/lHyYuCJQUBUjcmgXqD7BPPPJhd/TAplTDZJoR94kobVuKYw6TSCK13L4
 4yaT/H3Ygf/hWctaj5MscpvlTs21BjMkGJA1rABTagjUG/2zxE9EJ8ZLKetGHr0KqE8NvK6X
 evK0Iai9Wrf+Ro3Yvv9+losWhRXKlJ6FVHmZkt+A8BOsDAbzsAB+vpT2M4nVKtio27hc+adZ
 zl6ncfYpQ8BZsUgkQmGOvVSO3kW0aZuoNcrLZUj2CCe5xWuTpfi/xlhJEduHpYC0KFJPVhD6
 e0SEgkGYzbanf3jldpXSsE07igiBNPgMIVavjRryivUSK57B5vCWK7No9Rf2V/chOgXQq2YP
 JVfM2cyKk2cOXWjOX9PYH46tPa1nHDzfhVTqUmeouw85G27IAlZjeSxa4KJK4zVLSlTtli1q
 T3qx2TYPhRAL/2EkguHqGmulNaayEsXX6pXTtVU7MVCh0WewGEWAhAaWVa35PW0lEO6c9ZeM
 FAPvC02oK4/8UamQtXwU1u/unHsg/IHc8BbH+t/7ESGzbDZpl7EQGMFVTVGLtchsafaWAAX6
 7NApPuxbRQHjVFfYSj1Gmu8xd9qBRUoEA==
IronPort-HdrOrdr: A9a23:GWzOLK62c3R1eGeKAQPXwPjXdLJyesId70hD6qkXc202TiX2ra
 6TdZgguCMc6wxhO03I5+rgBEDoexq1nvRICOIqUotKMjOLhILRFuFfxLqn5SH8ECvj8eMY/6
 Jhf69iTODUNzFB/KPHCM3SKadG/DFBm5rY4dvj8w==
From: Yogita Urade <yurade@cisco.com>
To: openembedded-devel@lists.openembedded.org
Subject: [oe][meta-oe][wrynose][PATCH 0/6] python3-tornado: Security fixes
Date: Wed,  4 Nov 2026 23:08:13 -0800
Message-Id: <20261105070819.2086816-1-yurade@cisco.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="utf-8"

Series

python3-tornado: Security fixes | expand

Message

Yogita Urade Nov. 5, 2026, 7:08 a.m. UTC

Backport 11 python3-tornado security fixes covering 6 CVEs to the python3-tornado
6.5.7 recipe on wrynose. The series adds the fixes as patches and updates
the recipe to apply them.

CVE-2026-103263 fix inclued dependent patch, CVE-2026-116577 and
CVE-2026-116578 fix is carried in three patches. The patches
retain upstream references.

Yogita Urade (6):
  python3-tornado: Fix CVE-2026-103261
  python3-tornado: Fix CVE-2026-103262
  python3-tornado: Fix CVE-2026-103263
  python3-tornado: Fix CVE-2026-115927
  python3-tornado: Fix CVE-2026-116577
  python3-tornado: Fix CVE-2026-116578

 .../python3-tornado/CVE-2026-103261.patch     |   98 ++
 .../python3-tornado/CVE-2026-103262.patch     | 1117 +++++++++++++++++
 .../CVE-2026-103263-dependent.patch           |  255 ++++
 .../python3-tornado/CVE-2026-103263.patch     |  422 +++++++
 .../python3-tornado/CVE-2026-115927.patch     |  397 ++++++
 .../python3-tornado/CVE-2026-116577_p1.patch  |  195 +++
 .../python3-tornado/CVE-2026-116577_p2.patch  |   99 ++
 .../python3-tornado/CVE-2026-116577_p3.patch  |  101 ++
 .../python3-tornado/CVE-2026-116578_p1.patch  |   62 +
 .../python3-tornado/CVE-2026-116578_p2.patch  |  106 ++
 .../python3-tornado/CVE-2026-116578_p3.patch  |  192 +++
 .../python/python3-tornado_6.5.7.bb           |   11 +
 12 files changed, 3055 insertions(+)
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103261.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103262.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103263-dependent.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103263.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-115927.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116577_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116577_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116577_p3.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116578_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116578_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116578_p3.patch