{"id":2221440,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2221440/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260409131728.278764-1-bernd@kuhls.net/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/1.2/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260409131728.278764-1-bernd@kuhls.net>","list_archive_url":null,"date":"2026-04-09T13:17:27","name":"[1/1] package/python3: security bump version to 3.14.4","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"55273eca4b1c757ba14801d7627a4823061d7652","submitter":{"id":86624,"url":"http://patchwork.ozlabs.org/api/1.2/people/86624/?format=json","name":"Bernd Kuhls","email":"bernd@kuhls.net"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260409131728.278764-1-bernd@kuhls.net/mbox/","series":[{"id":499297,"url":"http://patchwork.ozlabs.org/api/1.2/series/499297/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=499297","date":"2026-04-09T13:17:27","name":"[1/1] package/python3: security bump version to 3.14.4","version":1,"mbox":"http://patchwork.ozlabs.org/series/499297/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2221440/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2221440/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=VO+Cb+s+;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fs0pm0RrFz1yCv\n\tfor ;\n Thu, 09 Apr 2026 23:17:36 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 5BDD04101F;\n\tThu, 9 Apr 2026 13:17:34 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id r28p9vsk1VRi; Thu, 9 Apr 2026 13:17:33 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 7816741030;\n\tThu, 9 Apr 2026 13:17:33 +0000 (UTC)","from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n by lists1.osuosl.org (Postfix) with ESMTP id 1401A1F6\n for ; Thu, 9 Apr 2026 13:17:32 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp4.osuosl.org (Postfix) with ESMTP id 061A841030\n for ; Thu, 9 Apr 2026 13:17:32 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id XtKffm1BC17o for ;\n Thu, 9 Apr 2026 13:17:31 +0000 (UTC)","from dd20012.kasserver.com (dd20012.kasserver.com [85.13.140.57])\n by smtp4.osuosl.org (Postfix) with ESMTPS id C69094101F\n for ; Thu, 9 Apr 2026 13:17:30 +0000 (UTC)","from fli4l.lan.fli4l (p4fd6ca66.dip0.t-ipconnect.de\n [79.214.202.102])\n by dd20012.kasserver.com (Postfix) with ESMTPSA id 6B1FCA4C0985;\n Thu, 9 Apr 2026 15:17:28 +0200 (CEST)","from bruckner.lan.fli4l ([192.168.1.1]:51150)\n by fli4l.lan.fli4l with esmtp (Exim 4.99.1)\n (envelope-from ) id 1wApGC-000000002MU-1GEW;\n Thu, 09 Apr 2026 13:17:28 +0000"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org 7816741030","OpenDKIM Filter v2.11.0 smtp4.osuosl.org C69094101F"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775740653;\n\tbh=FG13OsG90LinSMjnZoRdS2QDcqODTCVf55ldhgidux0=;\n\th=From:To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:Cc:From;\n\tb=VO+Cb+s+sULJ0Ohenhz9k1HHTxkagzE7FxVSvfrIfmsbhhgglBuyvIgBhMAAG1mGq\n\t OLkssoYDi2X3OGK8lz8kdzapZPU/JV3NXaDFRNoBMgIUXTC+J2arZNxYW+qvwd7QNO\n\t 66ebVNg16OxUHGLQpFwhPp3I2M6c8srXrIFT/b+unod4xHbOQ9cXo5yVMGTz5GeUrS\n\t aQrbVxLuGuHY8CL83LsxHNNYIddcj0lyEb5HO9GdjkbEKWeJ3hu0Ax/2eCmM8MAf7M\n\t uJTJWf+Uyn+jTKutbhtaMnRllTTb+GfZyH3GwLnrcqJEAkS5F3SFTWyh/VNEqk6Q+l\n\t 2cBOcLf79XHKQ==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=85.13.140.57;\n helo=dd20012.kasserver.com; envelope-from=bernd@kuhls.net;\n receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp4.osuosl.org C69094101F","From":"Bernd Kuhls ","To":"buildroot@buildroot.org","Date":"Thu, 9 Apr 2026 15:17:27 +0200","Message-ID":"<20260409131728.278764-1-bernd@kuhls.net>","X-Mailer":"git-send-email 2.47.3","MIME-Version":"1.0","X-Spamd-Bar":"/","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=kuhls.net;\n s=kas202511301023; t=1775740648;\n bh=9+4ErCtMOkAp3mpnLZUj9DqJ80Vw/BTfA8C6f+yzS6U=;\n h=From:To:Cc:Subject:Date:From;\n b=RX2zOe4iMzmY54giBVtJAfbo3/rd2i/yagT2wQlVtelxLCHAqUUWqAiAIhZVvccvo\n rzYzto8H9coRv9k4BYXgt7i+ESQ2MT+26bzs43m56dTJRq068UsrzR5rS0Y9aJ1gle\n 3x7J41+bBorW+M1vqAm+qDt7V8G6BuWzQtvjHF5KTVXjbDDYf7eDh8vHS0aKFcUVZh\n MGVqKe3SbfBeBICOSQtqIIiEOKOla9UVKretzyNbpMEnBlV3FoFTW/3A6b6h8Gt6pU\n J/NT6JVBLXDP0QY+oifXWM2YZLb+P4mk1Fi95+qee6i5wKB2V3W05+geNgfgdLjQ2p\n W75nWrvOkKl+Q==","X-Mailman-Original-Authentication-Results":["smtp4.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=kuhls.net","smtp4.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=kuhls.net header.i=@kuhls.net header.a=rsa-sha256\n header.s=kas202511301023 header.b=RX2zOe4i"],"Subject":"[Buildroot] [PATCH 1/1] package/python3: security bump version to\n 3.14.4","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Cc":"James Hilliard ,\n Thomas Petazzoni ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"https://www.python.org/downloads/release/python-3144/\nhttps://docs.python.org/release/3.14.4/whatsnew/changelog.html\n\nFixes\nCVE 2026-4224: https://www.cve.org/CVERecord?id=CVE-2026-4224\nCVE 2026-3644: https://www.cve.org/CVERecord?id=CVE-2026-3644\nCVE 2026-2297: https://www.cve.org/CVERecord?id=CVE-2026-2297\n\nRebased patch 0010 due to upstream commit\nhttps://github.com/python/cpython/commit/616e6118442832544fab0b93e9dd7d15411a2a58\n\nSigned-off-by: Bernd Kuhls \n---\n ...-Fix-compilation-of-Modules-_remote_debuggi.patch | 12 ++++++------\n package/python3/python3.hash | 4 ++--\n package/python3/python3.mk | 2 +-\n 3 files changed, 9 insertions(+), 9 deletions(-)","diff":"diff --git a/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch b/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch\nindex 716d9d3e8a..b000a68e9b 100644\n--- a/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch\n+++ b/package/python3/0010-gh-139275-Fix-compilation-of-Modules-_remote_debuggi.patch\n@@ -7,7 +7,7 @@ Subject: [PATCH] gh-139275: Fix compilation of\n \n Upstream: https://github.com/python/cpython/commit/1963e701001839389cfb1b11d803b0743f4705d7\n \n-[ Bernd Kuhls: ported to Python 3.14.2]\n+[ Bernd Kuhls: ported to Python 3.14.4]\n [ Vincent Fazio: update to apply cleanly to 3.14.3 ]\n Signed-off-by: Bernd Kuhls \n ---\n@@ -29,28 +29,28 @@ diff --git a/Modules/_remote_debugging_module.c b/Modules/_remote_debugging_modu\n index b46538b76df..e86a27d5812 100644\n --- a/Modules/_remote_debugging_module.c\n +++ b/Modules/_remote_debugging_module.c\n-@@ -812,7 +812,7 @@ _Py_RemoteDebug_GetAsyncioDebugAddress(proc_handle_t* handle)\n+@@ -834,7 +834,7 @@ _Py_RemoteDebug_GetAsyncioDebugAddress(proc_handle_t* handle)\n PyErr_SetString(PyExc_RuntimeError, \"Failed to find the AsyncioDebug section in the process.\");\n _PyErr_ChainExceptions1(exc);\n }\n -#elif defined(__linux__)\n +#elif defined(__linux__) && HAVE_PROCESS_VM_READV\n // On Linux, search for asyncio debug in executable or DLL\n- address = search_linux_map_for_section(handle, \"AsyncioDebug\", \"_asyncio.cpython\");\n+ address = search_linux_map_for_section(handle, \"AsyncioDebug\", \"_asyncio.cpython\", NULL);\n if (address == 0) {\n diff --git a/Python/remote_debug.h b/Python/remote_debug.h\n index 8f9b6cd4c49..b7d17a0f345 100644\n --- a/Python/remote_debug.h\n +++ b/Python/remote_debug.h\n-@@ -886,7 +886,7 @@ _Py_RemoteDebug_GetPyRuntimeAddress(proc_handle_t* handle)\n+@@ -923,7 +923,7 @@\n handle->pid);\n _PyErr_ChainExceptions1(exc);\n }\n -#elif defined(__linux__)\n +#elif defined(__linux__) && HAVE_PROCESS_VM_READV\n // On Linux, search for 'python' in executable or DLL\n- address = search_linux_map_for_section(handle, \"PyRuntime\", \"python\");\n- if (address == 0) {\n+ address = search_linux_map_for_section(handle, \"PyRuntime\", \"python\",\n+ _Py_RemoteDebug_ValidatePyRuntimeCookie);\n -- \n 2.47.3\n \ndiff --git a/package/python3/python3.hash b/package/python3/python3.hash\nindex b674b589bd..13e2b94336 100644\n--- a/package/python3/python3.hash\n+++ b/package/python3/python3.hash\n@@ -1,4 +1,4 @@\n-# From https://www.python.org/downloads/release/python-3143/\n-sha256 a97d5549e9ad81fe17159ed02c68774ad5d266c72f8d9a0b5a9c371fe85d902b Python-3.14.3.tar.xz\n+# From https://www.python.org/downloads/release/python-3144/\n+sha256 d923c51303e38e249136fc1bdf3568d56ecb03214efdef48516176d3d7faaef8 Python-3.14.4.tar.xz\n # Locally computed\n sha256 b0e25a78cffb43f4d92de8b61ccfa1f1f98ecbc22330b54b5251e7b6ba010231 LICENSE\ndiff --git a/package/python3/python3.mk b/package/python3/python3.mk\nindex 07cba7c02d..c71cb0b05b 100644\n--- a/package/python3/python3.mk\n+++ b/package/python3/python3.mk\n@@ -5,7 +5,7 @@\n ################################################################################\n \n PYTHON3_VERSION_MAJOR = 3.14\n-PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).3\n+PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).4\n PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz\n PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION)\n PYTHON3_LICENSE = Python-2.0, others\n","prefixes":["1/1"]}