From: Yogita Urade <yurade@cisco.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][wrynose][v2 PATCH 00/27] python3-git: Security fixes
Date: Fri, 6 Nov 2026 06:43:04 -0800 [thread overview]
Message-ID: <20261106144331.3354811-1-yurade@cisco.com> (raw)
Backport 27 GitPython security fixes covering 28 CVEs to the python3-git
3.1.43 recipe on wrynose. The series adds the fixes as patches and updates
the recipe to apply them.
CVE-2026-78678 and CVE-2026-78679 are addressed together. The CVE-2026-76222
fix includes a regression correction and follow-up patch, CVE-2026-73619
and CVE-2026-87819 are each carried in two patches. The patches retain
upstream references.
Changes in v2:
- Re-reviewed all patches and removed changes that were not needed for the backports.
- Restored upstream commit metadata and corrected CVE references.
- Updated Backport Changes notes to describe the differences from upstream.
- Removed trailing whitespace and regenerated the series diffstat.
Yogita Urade (27):
python3-git: fix CVE-2026-67326
python3-git: fix CVE-2026-67323
python3-git: Fix CVE-2026-67325
python3-git: Fix CVE-2026-67324
python3-git: fix CVE-2026-67322
python3-git: fix CVE-2026-69097
python3-git: fix CVE-2026-73625
python3-git: fix CVE-2026-73623
python3-git: fix CVE-2026-73624
python3-git: fix CVE-2026-73622
python3-git: fix CVE-2026-73621
python3-git: fix CVE-2026-73620
python3-git: fix CVE-2026-73619
python3-git: fix CVE-2026-76221
python3-git: fix CVE-2026-76220
python3-git: fix CVE-2026-76219
python3-git: fix CVE-2026-76218
python3-git: fix CVE-2026-76217
python3-git: fix CVE-2026-76222
python3-git: fix CVE-2026-78678 CVE-2026-78679
python3-git: fix CVE-2026-78677
python3-git: fix CVE-2026-78676
python3-git: fix CVE-2026-78675
python3-git: fix CVE-2026-87817
python3-git: fix CVE-2026-87818
python3-git: Fix CVE-2026-87819
python3-git: fix CVE-2026-100689
.../python/python3-git/CVE-2026-100689.patch | 91 +++++
.../python/python3-git/CVE-2026-67322.patch | 171 ++++++++
.../python/python3-git/CVE-2026-67323.patch | 356 +++++++++++++++++
.../python/python3-git/CVE-2026-67324.patch | 94 +++++
.../python/python3-git/CVE-2026-67325_p1.patch | 49 +++
.../python/python3-git/CVE-2026-67325_p2.patch | 52 +++
.../python/python3-git/CVE-2026-67326.patch | 107 +++++
.../python/python3-git/CVE-2026-69097.patch | 60 +++
.../python/python3-git/CVE-2026-73619_p1.patch | 58 +++
.../python/python3-git/CVE-2026-73619_p2.patch | 43 ++
.../python/python3-git/CVE-2026-73620.patch | 130 ++++++
.../python/python3-git/CVE-2026-73621.patch | 72 ++++
.../python/python3-git/CVE-2026-73622.patch | 60 +++
.../python/python3-git/CVE-2026-73623.patch | 53 +++
.../python/python3-git/CVE-2026-73624.patch | 139 +++++++
.../python/python3-git/CVE-2026-73625.patch | 59 +++
.../python/python3-git/CVE-2026-76217.patch | 179 +++++++++
.../python/python3-git/CVE-2026-76218.patch | 92 +++++
.../python/python3-git/CVE-2026-76219.patch | 153 +++++++
.../python/python3-git/CVE-2026-76220.patch | 65 +++
.../python/python3-git/CVE-2026-76221.patch | 59 +++
.../python3-git/CVE-2026-76222-regression.patch | 39 ++
.../python/python3-git/CVE-2026-76222_p1.patch | 118 ++++++
.../python/python3-git/CVE-2026-76222_p2.patch | 45 +++
.../python/python3-git/CVE-2026-78675.patch | 47 +++
.../python/python3-git/CVE-2026-78676.patch | 67 ++++
.../python/python3-git/CVE-2026-78677.patch | 87 ++++
.../CVE-2026-78678_CVE-2026-78679.patch | 220 ++++++++++
.../python/python3-git/CVE-2026-87817.patch | 443 +++++++++++++++++++++
.../python/python3-git/CVE-2026-87818.patch | 55 +++
.../python/python3-git/CVE-2026-87819_p1.patch | 78 ++++
.../python/python3-git/CVE-2026-87819_p2.patch | 146 +++++++
meta/recipes-devtools/python/python3-git_3.1.43.bb | 32 ++
33 files changed, 3519 insertions(+)
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-100689.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-67322.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-67323.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-67324.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-67325_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-67325_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-67326.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-69097.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73619_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73619_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73620.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73621.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73622.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73623.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73624.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-73625.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76217.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76218.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76219.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76220.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76221.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76222-regression.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76222_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-76222_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-78675.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-78676.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-78677.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-78678_CVE-2026-78679.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-87817.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-87818.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-87819_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-87819_p2.patch
--
2.53.0
next reply other threads:[~2026-11-06 14:43 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-11-06 14:43 Yogita Urade [this message]
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 01/27] python3-git: fix CVE-2026-67326 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 02/27] python3-git: fix CVE-2026-67323 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 03/27] python3-git: Fix CVE-2026-67325 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 04/27] python3-git: fix CVE-2026-67324 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 05/27] python3-git: fix CVE-2026-67322 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 06/27] python3-git: fix CVE-2026-69097 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 07/27] python3-git: fix CVE-2026-73625 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 08/27] python3-git: fix CVE-2026-73623 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 09/27] python3-git: fix CVE-2026-73624 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 10/27] python3-git: fix CVE-2026-73622 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 11/27] python3-git: fix CVE-2026-73621 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 12/27] python3-git: fix CVE-2026-73620 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 13/27] python3-git: fix CVE-2026-73619 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 14/27] python3-git: fix CVE-2026-76221 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 15/27] python3-git: fix CVE-2026-76220 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 16/27] python3-git: fix CVE-2026-76219 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 17/27] python3-git: fix CVE-2026-76218 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 18/27] python3-git: fix CVE-2026-76217 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 19/27] python3-git: fix CVE-2026-76222 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 20/27] python3-git: fix CVE-2026-78678 CVE-2026-78679 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 21/27] python3-git: fix CVE-2026-78677 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 22/27] python3-git: fix CVE-2026-78676 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 23/27] python3-git: fix CVE-2026-78675 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 24/27] python3-git: fix CVE-2026-87817 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 25/27] python3-git: fix CVE-2026-87818 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 26/27] python3-git: Fix CVE-2026-87819 Yogita Urade
2026-11-06 14:43 ` [OE-core][wrynose][v2 PATCH 27/27] python3-git: fix CVE-2026-100689 Yogita Urade
2026-11-14 0:16 ` [OE-core][wrynose][v2 PATCH 00/27] python3-git: Security fixes Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261106144331.3354811-1-yurade@cisco.com \
--to=yurade@cisco.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox