From: Ross Burton <ross.burton@intel.com>
Date: Thu, 21 Mar 2019 12:31:52 +0000 (+0000)
Subject: python: fix CVE-2018-14647 in python-native too
X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~15007
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d05c79ed46880a7bfdbf166c336a9d83167ddf34;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

python: fix CVE-2018-14647 in python-native too

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-devtools/python/python-native_2.7.15.bb b/meta/recipes-devtools/python/python-native_2.7.15.bb
index f00153f0eea..26d67df6b83 100644
--- a/meta/recipes-devtools/python/python-native_2.7.15.bb
+++ b/meta/recipes-devtools/python/python-native_2.7.15.bb
@@ -17,6 +17,7 @@ SRC_URI += "\
             file://parallel-makeinst-create-bindir.patch \
             file://revert_use_of_sysconfigdata.patch \
             file://0001-python-native-fix-one-do_populate_sysroot-warning.patch \
+            file://0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch \
            "
 
 S = "${WORKDIR}/Python-${PV}"