Titouan Christophe 4a741d4b1a package/python3: add patch for CVE-2026-8328 ...

This fixes the following vulnerability:

- CVE-2026-8328:
    The ftpcp() function in Lib/ftplib.py was not updated when
    CVE-2021-4189 was fixed. While makepasv() was patched to replace
    server-supplied PASV host addresses with the actual peer address
    (getpeername()[0]), ftpcp() still calls parse227() directly and passes
    the raw attacker-controllable IP address and port to
    target.sendport(). This patch is related to CVE-2021-4189.
    https://www.cve.org/CVERecord?id=CVE-2026-8328

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-06-11 11:46:37 +02:00

..

0001-Make-the-build-of-pyc-files-conditional.patch

…

0002-Disable-buggy_getaddrinfo-configure-test-when-cross-.patch

…

0003-Add-an-option-to-disable-pydoc.patch

…

0004-Add-an-option-to-disable-lib2to3.patch

…

0005-Add-an-option-to-disable-IDLE.patch

…

0006-configure.ac-move-PY_STDLIB_MOD_SET_NA-further-up.patch

…

0007-Add-option-to-disable-the-sqlite3-module.patch

…

0008-Add-an-option-to-disable-the-tk-module.patch

…

0009-Add-an-option-to-disable-the-curses-module.patch

…

0010-Add-an-option-to-disable-expat.patch

…

0011-configure.ac-fixup-CC-print-multiarch-output-for-mus.patch

…

0012-gh-115382-Fix-cross-compiles-when-host-and-target-us.patch

…

0013-Fix-O-n-2-canonical-ordering-in-unicodedata-normalize.patch

package/python3: add patch for CVE-2026-3276

2026-06-11 11:46:33 +02:00

0014-tarfile-data_filter-validate-written-link.patch

package/python3: add patch for CVE-2026-7774

2026-06-11 11:46:35 +02:00

0015-Apply-CVE-2021-4189-PASV-fix-to-ftplib-ftpcp.patch

package/python3: add patch for CVE-2026-8328

2026-06-11 11:46:37 +02:00

Config.in

…

Config.in.host

…

python3.hash

…

python3.mk

package/python3: add patch for CVE-2026-8328

2026-06-11 11:46:37 +02:00