python2.7: Update version from 2.7.16-2+deb10u6 to 2.7.16-2+deb10u7

[stobe-ctj]

Purpose of the Pull Request

This version fixes following CVEs.

• CVE-2025-6069
• CVE-2025-6075
• CVE-2025-8194
• CVE-2025-12084
• CVE-2026-0672

ELA: ELA-1640-1

Testing

• Package build
• ptest

Package Build

Run the following:

export Texport TEST_PACKAGES="python"
export TEST_DISTROS="deby" 
export TEST_MACHINES="qemuarm64"   
export COMPOSE_HTTP_TIMEOUT=7200
export PTEST_RUNNER_TIMEOUT=7200
make -C ./docker/ build_test

The package was successfully built.

NOTE: Testing distro deby ...
NOTE: Testing machine qemuarm64 ...
NOTE: These recipes will be tested: python
NOTE: Building python ...
NOTE: Build python: PASS

Build configuration:

$ head -n 20 tests/logs/deby/qemuarm64/python.build.log
Parsing recipes...done.
Parsing of 1044 .bb files complete (0 cached, 1044 parsed). 1828 targets, 68 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION           = "1.42.0"
BUILD_SYS            = "x86_64-linux"
NATIVELSBSTRING      = "debian-10"
TARGET_SYS           = "aarch64-deby-linux"
MACHINE              = "qemuarm64"
DISTRO               = "deby"
DISTRO_VERSION       = "10.0"
TUNE_FEATURES        = "aarch64 armv8a crc"
TARGET_FPU           = ""
meta                 
meta-poky            = "warrior:d4b57c68b22027c2bedff335dee06af963e4f8a8"
meta-debian          = "update-python2.7_2.7.16-2+deb10u7:cf34cc00f0899a13cc075ee8fdb2b21db8bae36f"

Initialising tasks...done.
Sstate summary: Wanted 446 Found 0 Missed 446 Current 0 (0% match, 0% complete)

ptest

Run the following:

export TEST_PACKAGES="python"
export TEST_DISTROS="deby"
export TEST_MACHINES="qemuarm64"
export COMPOSE_HTTP_TIMEOUT=7200
export PTEST_RUNNER_TIMEOUT=7200
export QEMU_PARAMS="-smp 4 -m 8192"
export IMAGE_ROOTFS_EXTRA_SPACE="1048576"
make -C ./docker/ qemu_ptest

Result:

Running ptest for python ...
python: PASS/SKIP/FAIL = 16502/746/11

$ grep ^FAIL: tests/logs/deby/qemuarm64/python.ptest.log
FAIL: test_build_ext (distutils.tests.test_build_ext.BuildExtTestCase)
FAIL: test_get_outputs (distutils.tests.test_build_ext.BuildExtTestCase)
FAIL: test_get_python_inc (distutils.tests.test_sysconfig.SysconfigTestCase)
FAIL: test_record_extensions (distutils.tests.test_install.InstallTestCase)
FAIL: test_search_cpp (distutils.tests.test_config_cmd.ConfigTestCase)
FAIL: test_get_python_inc (distutils.tests.test_sysconfig.SysconfigTestCase)
FAIL: test_import_initless_directory_warning (test.test_import.ImportTests)
FAIL: test_import_initless_directory_warning (test.test_import.ImportTests)
FAIL: testEncodings (test.test_minidom.MinidomTest)
FAIL: test_getsitepackages (test.test_site.HelperFunctionsTests)
FAIL: test_getsitepackages (test.test_site.HelperFunctionsTests)

The ptest results from the pre-update revision are as follows:

Running ptest for python ...
python: PASS/SKIP/FAIL = 16493/740/11

$ grep ^FAIL: tests/logs/deby/qemuarm64/python.ptest.log
FAIL: test_get_python_inc (distutils.tests.test_sysconfig.SysconfigTestCase)
FAIL: test_build_ext (distutils.tests.test_build_ext.BuildExtTestCase)
FAIL: test_get_outputs (distutils.tests.test_build_ext.BuildExtTestCase)
FAIL: test_record_extensions (distutils.tests.test_install.InstallTestCase)
FAIL: test_search_cpp (distutils.tests.test_config_cmd.ConfigTestCase)
FAIL: test_get_python_inc (distutils.tests.test_sysconfig.SysconfigTestCase)
FAIL: test_import_initless_directory_warning (test.test_import.ImportTests)
FAIL: test_import_initless_directory_warning (test.test_import.ImportTests)
FAIL: testEncodings (test.test_minidom.MinidomTest)
FAIL: test_getsitepackages (test.test_site.HelperFunctionsTests)
FAIL: test_getsitepackages (test.test_site.HelperFunctionsTests)

After the update, there are nine more PASSes and six more SKIPs than before the update.
The new SKIP items are as follows:

SKIP: testAppendChildNoQuadraticComplexity (test.test_minidom.MinidomTest) "resource 'cpu' is not enabled"
SKIP: test_eof_no_quadratic_complexity (test.test_htmlparser.AttributesTestCase) "resource 'cpu' is not enabled"
SKIP: test_expandvars_large (test.test_macpath.MacCommonTest) "resource 'cpu' is not enabled"
SKIP: test_expandvars_large (test.test_ntpath.NtCommonTest) "resource 'cpu' is not enabled"
SKIP: test_expandvars_large (test.test_ntpath.TestNtpath) "resource 'cpu' is not enabled"
SKIP: test_expandvars_large (test.test_posixpath.PosixCommonTest) "resource 'cpu' is not enabled"

There is no difference in the failed test cases.
Therefore, it can be said that there is no regression before and after the update.

[masami256]

@stobe-ctj confirmed. thank you.