From 7d1835023c053a4e67d974b864845be154e7af19 Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Tue, 25 Aug 2026 11:58:04 +0200 Subject: [PATCH 1/2] overlay profiles: Switch to dev-lang/python-3.13 Signed-off-by: Krzesimir Nowak --- .../coreos-overlay/profiles/coreos/base/make.defaults | 10 +++++----- .../coreos-overlay/profiles/coreos/base/package.mask | 4 ++-- .../coreos/targets/sdk/transition/make.defaults | 10 +++++----- .../coreos/targets/sdk/transition/package.unmask | 2 +- 4 files changed, 13 insertions(+), 13 deletions(-) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults index ef3eeb043f4..4a794cc998b 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults @@ -18,13 +18,13 @@ USE_EXPAND="${USE_EXPAND} GO_VERSION" USE="${USE} -cracklib -cups -tcpd -berkdb" -# Use Python 3.12 as the default version. -PYTHON_SINGLE_TARGET="-pypy3_11 -python3_11 python3_12 -python3_13 -python3_14 -python3_15 -python3_13t -python3_14t -python3_15t" -PYTHON_TARGETS="-pypy3_11 -python3_11 python3_12 -python3_13 -python3_14 -python3_15 -python3_13t -python3_14t -python3_15t" +# Use Python 3.13 as the default version. +PYTHON_SINGLE_TARGET="-python3_12 python3_13 -python3_14 -python3_15 -python3_14t -python3_15t" +PYTHON_TARGETS="-python3_12 python3_13 -python3_14 -python3_15 -python3_14t -python3_15t" # Same as above, but for bootstrapping. -BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_single_target_pypy3_11 -python_single_target_python3_11 python_single_target_python3_12 -python_single_target_python3_13 -python_single_target_python3_14 -python_single_target_python3_15 -python_single_target_python3_13t -python_single_target_python3_14t -python_single_target_python3_15t" -BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_targets_pypy3_11 -python_targets_python3_11 python_targets_python3_12 -python_targets_python3_13 -python_targets_python3_14 -python_targets_python3_15 -python_targets_python3_13t -python_targets_python3_14t -python_targets_python3_15t" +BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_single_target_python3_12 python_single_target_python3_13 -python_single_target_python3_14 -python_single_target_python3_15 -python_single_target_python3_14t -python_single_target_python3_15t" +BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_targets_python3_12 python_targets_python3_13 -python_targets_python3_14 -python_targets_python3_15 -python_targets_python3_14t -python_targets_python3_15t" # Never install cron or cron jobs diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask index 10bc3f93040..11674ba8f3d 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.mask @@ -17,8 +17,8 @@ # Do not install python versions that were "disabled" in # PYTHON_TARGETS. For some reason emerge still insists on installing # those as a dependency for some packages. -=dev-lang/python-3.13 +=dev-lang/python-3.14 # We are using RedHat patches for grub, so until they rebase them on # top of 2.14, we are locked out of the update. diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/make.defaults b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/make.defaults index 540cbb1ae7d..ea7d161d372 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/make.defaults +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/make.defaults @@ -1,9 +1,9 @@ # Override python settings -# Use Python 3.12 as the default version, allow python 3.11 for a transition. -PYTHON_SINGLE_TARGET="-pypy3_11 -python3_11 python3_12 -python3_13 -python3_14 -python3_13t -python3_14t" -PYTHON_TARGETS="-pypy3_11 python3_11 python3_12 -python3_13 -python3_14 -python3_13t -python3_14t" +# Use Python 3.13 as the default version, allow python 3.12 for a transition. +PYTHON_SINGLE_TARGET="-python3_12 python3_13 -python3_14 -python3_15 -python3_14t -python3_15t" +PYTHON_TARGETS="python3_12 python3_13 -python3_14 -python3_15 -python3_14t -python3_15t" # Same as above, but for bootstrapping. -BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_single_target_pypy3_11 -python_single_target_python3_11 python_single_target_python3_12 -python_single_target_python3_13 -python_single_target_python3_14 -python_single_target_python3_13t -python_single_target_python3_14t" -BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_targets_pypy3_11 python_targets_python3_11 python_targets_python3_12 -python_targets_python3_13 -python_targets_python3_14 -python_targets_python3_13t -python_targets_python3_14t" +BOOTSTRAP_USE="${BOOTSTRAP_USE} -python_single_target_python3_12 python_single_target_python3_13 -python_single_target_python3_14 -python_single_target_python3_15 -python_single_target_python3_14t -python_single_target_python3_15t" +BOOTSTRAP_USE="${BOOTSTRAP_USE} python_targets_python3_12 python_targets_python3_13 -python_targets_python3_14 -python_targets_python3_15 -python_targets_python3_14t -python_targets_python3_15t" diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/package.unmask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/package.unmask index 0873f9ab037..ddd165ca4e2 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/package.unmask +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/transition/package.unmask @@ -1 +1 @@ -=dev-lang/python-3.11* +=dev-lang/python-3.12* From 84edb82840829014b4703cb5a7fc18c51cc1f028 Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Wed, 26 Aug 2026 11:19:25 +0200 Subject: [PATCH 2/2] changelog: Add entries Signed-off-by: Krzesimir Nowak --- changelog/security/2026-08-26-python-bump.md | 1 + changelog/updates/2026-08-26-python-bump.md | 1 + 2 files changed, 2 insertions(+) create mode 100644 changelog/security/2026-08-26-python-bump.md create mode 100644 changelog/updates/2026-08-26-python-bump.md diff --git a/changelog/security/2026-08-26-python-bump.md b/changelog/security/2026-08-26-python-bump.md new file mode 100644 index 00000000000..6f92a7de732 --- /dev/null +++ b/changelog/security/2026-08-26-python-bump.md @@ -0,0 +1 @@ +- python ([CVE-2026-1502](https://www.cve.org/CVERecord/?id=CVE-2026-1502), [CVE-2026-6100](https://www.cve.org/CVERecord/?id=CVE-2026-6100)) diff --git a/changelog/updates/2026-08-26-python-bump.md b/changelog/updates/2026-08-26-python-bump.md new file mode 100644 index 00000000000..85258848a2f --- /dev/null +++ b/changelog/updates/2026-08-26-python-bump.md @@ -0,0 +1 @@ +- python ([3.13.14](https://www.python.org/downloads/release/python-31314/))