Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.2/patches/2221440/?format=api
{ "id": 2221440, "url": "http://patchwork.ozlabs.org/api/1.2/patches/2221440/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260409131728.278764-1-bernd@kuhls.net/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/1.2/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260409131728.278764-1-bernd@kuhls.net>", "list_archive_url": null, "date": "2026-04-09T13:17:27", "name": "[1/1] package/python3: security bump version to 3.14.4", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "55273eca4b1c757ba14801d7627a4823061d7652", "submitter": { "id": 86624, "url": "http://patchwork.ozlabs.org/api/1.2/people/86624/?format=api", "name": "Bernd Kuhls", "email": "bernd@kuhls.net" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260409131728.278764-1-bernd@kuhls.net/mbox/", "series": [ { "id": 499297, "url": "http://patchwork.ozlabs.org/api/1.2/series/499297/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=499297", "date": "2026-04-09T13:17:27", "name": "[1/1] package/python3: security bump version to 3.14.4", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/499297/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2221440/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2221440/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=VO+Cb+s+;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fs0pm0RrFz1yCv\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Thu, 09 Apr 2026 23:17:36 +1000 (AEST)", "from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 5BDD04101F;\n\tThu, 9 Apr 2026 13:17:34 +0000 (UTC)", "from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id r28p9vsk1VRi; Thu, 9 Apr 2026 13:17:33 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 7816741030;\n\tThu, 9 Apr 2026 13:17:33 +0000 (UTC)", "from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n by lists1.osuosl.org (Postfix) with ESMTP id 1401A1F6\n for <buildroot@buildroot.org>; Thu, 9 Apr 2026 13:17:32 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp4.osuosl.org (Postfix) with ESMTP id 061A841030\n for <buildroot@buildroot.org>; Thu, 9 Apr 2026 13:17:32 +0000 (UTC)", "from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id XtKffm1BC17o for <buildroot@buildroot.org>;\n Thu, 9 Apr 2026 13:17:31 +0000 (UTC)", "from dd20012.kasserver.com (dd20012.kasserver.com [85.13.140.57])\n by smtp4.osuosl.org (Postfix) with ESMTPS id C69094101F\n for <buildroot@buildroot.org>; Thu, 9 Apr 2026 13:17:30 +0000 (UTC)", "from fli4l.lan.fli4l (p4fd6ca66.dip0.t-ipconnect.de\n [79.214.202.102])\n by dd20012.kasserver.com (Postfix) with ESMTPSA id 6B1FCA4C0985;\n Thu, 9 Apr 2026 15:17:28 +0200 (CEST)", "from bruckner.lan.fli4l ([192.168.1.1]:51150)\n by fli4l.lan.fli4l with esmtp (Exim 4.99.1)\n (envelope-from <bernd@kuhls.net>) id 1wApGC-000000002MU-1GEW;\n Thu, 09 Apr 2026 13:17:28 +0000" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp4.osuosl.org 7816741030", "OpenDKIM Filter v2.11.0 smtp4.osuosl.org C69094101F" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775740653;\n\tbh=FG13OsG90LinSMjnZoRdS2QDcqODTCVf55ldhgidux0=;\n\th=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:Cc:From;\n\tb=VO+Cb+s+sULJ0Ohenhz9k1HHTxkagzE7FxVSvfrIfmsbhhgglBuyvIgBhMAAG1mGq\n\t OLkssoYDi2X3OGK8lz8kdzapZPU/JV3NXaDFRNoBMgIUXTC+J2arZNxYW+qvwd7QNO\n\t 66ebVNg16OxUHGLQpFwhPp3I2M6c8srXrIFT/b+unod4xHbOQ9cXo5yVMGTz5GeUrS\n\t aQrbVxLuGuHY8CL83LsxHNNYIddcj0lyEb5HO9GdjkbEKWeJ3hu0Ax/2eCmM8MAf7M\n\t uJTJWf+Uyn+jTKutbhtaMnRllTTb+GfZyH3GwLnrcqJEAkS5F3SFTWyh/VNEqk6Q+l\n\t 2cBOcLf79XHKQ==", "Received-SPF": "Pass (mailfrom) identity=mailfrom; client-ip=85.13.140.57;\n helo=dd20012.kasserver.com; envelope-from=bernd@kuhls.net;\n receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp4.osuosl.org C69094101F", "From": "Bernd Kuhls <bernd@kuhls.net>", "To": "buildroot@buildroot.org", "Date": "Thu, 9 Apr 2026 15:17:27 +0200", "Message-ID": "<20260409131728.278764-1-bernd@kuhls.net>", "X-Mailer": "git-send-email 2.47.3", "MIME-Version": "1.0", "X-Spamd-Bar": "/", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=kuhls.net;\n s=kas202511301023; t=1775740648;\n bh=9+4ErCtMOkAp3mpnLZUj9DqJ80Vw/BTfA8C6f+yzS6U=;\n h=From:To:Cc:Subject:Date:From;\n b=RX2zOe4iMzmY54giBVtJAfbo3/rd2i/yagT2wQlVtelxLCHAqUUWqAiAIhZVvccvo\n rzYzto8H9coRv9k4BYXgt7i+ESQ2MT+26bzs43m56dTJRq068UsrzR5rS0Y9aJ1gle\n 3x7J41+bBorW+M1vqAm+qDt7V8G6BuWzQtvjHF5KTVXjbDDYf7eDh8vHS0aKFcUVZh\n MGVqKe3SbfBeBICOSQtqIIiEOKOla9UVKretzyNbpMEnBlV3FoFTW/3A6b6h8Gt6pU\n J/NT6JVBLXDP0QY+oifXWM2YZLb+P4mk1Fi95+qee6i5wKB2V3W05+geNgfgdLjQ2p\n W75nWrvOkKl+Q==", "X-Mailman-Original-Authentication-Results": [ "smtp4.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=kuhls.net", "smtp4.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=kuhls.net header.i=@kuhls.net header.a=rsa-sha256\n header.s=kas202511301023 header.b=RX2zOe4i" ], "Subject": "[Buildroot] [PATCH 1/1] package/python3: security bump version to\n 3.14.4", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "Cc": "James Hilliard <james.hilliard1@gmail.com>,\n Thomas Petazzoni <thomas.petazzoni@bootlin.com>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "https://www.python.org/downloads/release/python-3144/\nhttps://docs.python.org/release/3.14.4/whatsnew/changelog.html\n\nFixes\nCVE 2026-4224: https://www.cve.org/CVERecord?id=CVE-2026-4224\nCVE 2026-3644: https://www.cve.org/CVERecord?id=CVE-2026-3644\nCVE 2026-2297: https://www.cve.org/CVERecord?id=CVE-2026-2297\n\nRebased patch 0010 due to upstream commit\nhttps://github.com/python/cpython/commit/616e6118442832544fab0b93e9dd7d15411a2a58\n\nSigned-off-by: Bernd Kuhls <bernd@kuhls.net>\n---\n ...-Fix-compilation-of-Modules-_remote_debuggi.patch | 12 ++++++------\n package/python3/python3.hash | 4 ++--\n package/python3/python3.mk | 2 +-\n 3 files changed, 9 insertions(+), 9 deletions(-)", "diff": "diff --git a/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch b/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch\nindex 716d9d3e8a..b000a68e9b 100644\n--- a/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch\n+++ b/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch\n@@ -7,7 +7,7 @@ Subject: [PATCH] gh-139275: Fix compilation of\n \n Upstream: https://github.com/python/cpython/commit/1963e701001839389cfb1b11d803b0743f4705d7\n \n-[ Bernd Kuhls: ported to Python 3.14.2]\n+[ Bernd Kuhls: ported to Python 3.14.4]\n [ Vincent Fazio: update to apply cleanly to 3.14.3 ]\n Signed-off-by: Bernd Kuhls <bernd@kuhls.net>\n ---\n@@ -29,28 +29,28 @@ diff --git a/Modules/_remote_debugging_module.c b/Modules/_remote_debugging_modu\n index b46538b76df..e86a27d5812 100644\n --- a/Modules/_remote_debugging_module.c\n +++ b/Modules/_remote_debugging_module.c\n-@@ -812,7 +812,7 @@ _Py_RemoteDebug_GetAsyncioDebugAddress(proc_handle_t* handle)\n+@@ -834,7 +834,7 @@ _Py_RemoteDebug_GetAsyncioDebugAddress(proc_handle_t* handle)\n PyErr_SetString(PyExc_RuntimeError, \"Failed to find the AsyncioDebug section in the process.\");\n _PyErr_ChainExceptions1(exc);\n }\n -#elif defined(__linux__)\n +#elif defined(__linux__) && HAVE_PROCESS_VM_READV\n // On Linux, search for asyncio debug in executable or DLL\n- address = search_linux_map_for_section(handle, \"AsyncioDebug\", \"_asyncio.cpython\");\n+ address = search_linux_map_for_section(handle, \"AsyncioDebug\", \"_asyncio.cpython\", NULL);\n if (address == 0) {\n diff --git a/Python/remote_debug.h b/Python/remote_debug.h\n index 8f9b6cd4c49..b7d17a0f345 100644\n --- a/Python/remote_debug.h\n +++ b/Python/remote_debug.h\n-@@ -886,7 +886,7 @@ _Py_RemoteDebug_GetPyRuntimeAddress(proc_handle_t* handle)\n+@@ -923,7 +923,7 @@\n handle->pid);\n _PyErr_ChainExceptions1(exc);\n }\n -#elif defined(__linux__)\n +#elif defined(__linux__) && HAVE_PROCESS_VM_READV\n // On Linux, search for 'python' in executable or DLL\n- address = search_linux_map_for_section(handle, \"PyRuntime\", \"python\");\n- if (address == 0) {\n+ address = search_linux_map_for_section(handle, \"PyRuntime\", \"python\",\n+ _Py_RemoteDebug_ValidatePyRuntimeCookie);\n -- \n 2.47.3\n \ndiff --git a/package/python3/python3.hash b/package/python3/python3.hash\nindex b674b589bd..13e2b94336 100644\n--- a/package/python3/python3.hash\n+++ b/package/python3/python3.hash\n@@ -1,4 +1,4 @@\n-# From https://www.python.org/downloads/release/python-3143/\n-sha256 a97d5549e9ad81fe17159ed02c68774ad5d266c72f8d9a0b5a9c371fe85d902b Python-3.14.3.tar.xz\n+# From https://www.python.org/downloads/release/python-3144/\n+sha256 d923c51303e38e249136fc1bdf3568d56ecb03214efdef48516176d3d7faaef8 Python-3.14.4.tar.xz\n # Locally computed\n sha256 b0e25a78cffb43f4d92de8b61ccfa1f1f98ecbc22330b54b5251e7b6ba010231 LICENSE\ndiff --git a/package/python3/python3.mk b/package/python3/python3.mk\nindex 07cba7c02d..c71cb0b05b 100644\n--- a/package/python3/python3.mk\n+++ b/package/python3/python3.mk\n@@ -5,7 +5,7 @@\n ################################################################################\n \n PYTHON3_VERSION_MAJOR = 3.14\n-PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).3\n+PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).4\n PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz\n PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION)\n PYTHON3_LICENSE = Python-2.0, others\n", "prefixes": [ "1/1" ] }