]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
python: add a fix for CVE-2019-9948 and CVE-2019-9636
authorMartin Jansa <martin.jansa@gmail.com>
Fri, 17 May 2019 20:16:17 +0000 (20:16 +0000)
committerArmin Kuster <akuster808@gmail.com>
Sat, 1 Jun 2019 16:11:13 +0000 (09:11 -0700)
commite7bdff05da6075efc21c5ac9492b06e481e5a239
tree2dd00db404f02a748815fdef69a2efaa4579bfe9
parent592e7de7f5208940fbcfcad3371f93f8ce2ca738
python: add a fix for CVE-2019-9948 and CVE-2019-9636

Source: OpenEmbedded.org
MR: 98320, 98319
Type: Security Fix
Disposition: Backport from https://git.openembedded.org/openembedded-core/commit/meta/recipes-devtools/python/python_2.7.16.bb?id=9d23b982fa4e0290761b3d15f6959779fed72ad6
ChangeID: e79b6fe3b7b4253bf0d76b029070ae869d5234bd
Description:

Fixes:
CVE-2019-9948
CVE-2019-9636

CVE-2019-9940 is a dup of 9948 per python.org
CVE-2019-9947 appears to be a dup of 9940 per https://bugs.python.org/issue30458#msg295067

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
[Minor clean up for thud]
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-devtools/python/python/bpo-35907-cve-2019-9948-fix.patch [new file with mode: 0644]
meta/recipes-devtools/python/python/bpo-35907-cve-2019-9948.patch [new file with mode: 0644]
meta/recipes-devtools/python/python/bpo-36216-cve-2019-9636-fix.patch [new file with mode: 0644]
meta/recipes-devtools/python/python/bpo-36216-cve-2019-9636.patch [new file with mode: 0644]
meta/recipes-devtools/python/python_2.7.16.bb