python314: address CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/ https://www.cve.org/CVERecord?id=CVE-2025-4517 https://www.cve.org/CVERecord?id=CVE-2025-4330 https://www.cve.org/CVERecord?id=CVE-2025-4138 https://www.cve.org/CVERecord?id=CVE-2024-12718 https://www.cve.org/CVERecord?id=CVE-2025-4435
2025-06-04 03:48:12 +09:00
parent e8bb3205d7
commit 94552b6dbd
2 changed files with 2058 additions and 0 deletions
@@ -340,6 +340,9 @@ stdenv.mkDerivation (finalAttrs: {
    ++ optionals (pythonAtLeast "3.13") [
      ./3.13/virtualenv-permissions.patch
    ]
+    ++ optionals (pythonAtLeast "3.14") [
+      ./3.14/CVE-2025-4517.patch
+    ]
    ++ optionals mimetypesSupport [
      # Make the mimetypes module refer to the right file
      ./mimetypes.patch