Skip to content

python: Fix CVE-2014-7185

[email protected] openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest1 patch 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/1python: Fix CVE-2014-7185meta/recipes-devtools/python/python/python-2.7.3-CVE-2014-7185.patch meta/recipes-devtools/python/python_2.7.3.bb+76 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/1] python: Fix CVE-2014-7185

From: Wenzong Fan <[email protected]>

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.

This back-ported patch fixes CVE-2014-7185

The following changes since commit 3c741a8d33acbf4b3d5eecc04533bc76e2f37253:

oprofile: 0.9.9 -> 1.0.0 (2014-11-09 10:21:24 +0000)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib wenzong/cve-python
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/cve-python

Wenzong Fan (1):
python: Fix CVE-2014-7185

 .../python/python/python-2.7.3-CVE-2014-7185.patch |   75 ++++++++++++++++++++
 meta/recipes-devtools/python/python_2.7.3.bb       |    1 +
 2 files changed, 76 insertions(+)
 create mode 100644 meta/recipes-devtools/python/python/python-2.7.3-CVE-2014-7185.patch
Signature · 1 line
1.7.9.5

Read the cover letter in its thread