* [Buildroot] [PATCH 1/1] package/python3: security bump version to 3.14.10
@ 2026-10-26 6:11 Bernd Kuhls
2026-10-26 6:40 ` Peter Korsgaard
0 siblings, 1 reply; 2+ messages in thread
From: Bernd Kuhls @ 2026-10-26 6:11 UTC (permalink / raw)
To: buildroot; +Cc: James Hilliard, Thomas Petazzoni
https://www.python.org/downloads/release/python-31410/
Security content in this release:
CVE-2026-115557:
Distrust compromised eMudhra intermediate CA keys
CVE-2026-114583:
Reject links replacing the destination in tarfile.tar_filter
gh-160300:
Reject cookies with a negative version in http.cookiejar
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
package/python3/python3.hash | 4 ++--
package/python3/python3.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/python3/python3.hash b/package/python3/python3.hash
index 20abfb573f..7272555258 100644
--- a/package/python3/python3.hash
+++ b/package/python3/python3.hash
@@ -1,4 +1,4 @@
-# From https://www.python.org/downloads/release/python-3149/
-sha256 e02d9ac21cebda6e46435369744a92c65cc7cd8669697694122cf97ffacd1e53 Python-3.14.9.tar.xz
+# From https://www.python.org/downloads/release/python-31410/
+sha256 de414a57119abef52784d8993e341d53aed635fc2b05c2607d9f98a2c5b72032 Python-3.14.10.tar.xz
# Locally computed
sha256 b0e25a78cffb43f4d92de8b61ccfa1f1f98ecbc22330b54b5251e7b6ba010231 LICENSE
diff --git a/package/python3/python3.mk b/package/python3/python3.mk
index 1916982dfe..c24020af9b 100644
--- a/package/python3/python3.mk
+++ b/package/python3/python3.mk
@@ -5,7 +5,7 @@
################################################################################
PYTHON3_VERSION_MAJOR = 3.14
-PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).9
+PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).10
PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz
PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION)
PYTHON3_LICENSE = Python-2.0, others
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-10-26 6:40 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-26 6:11 [Buildroot] [PATCH 1/1] package/python3: security bump version to 3.14.10 Bernd Kuhls
2026-10-26 6:40 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox