Skip to content

python: fix two CVEs

Chen Qi openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2python: backport patch to fix CVE-2018-1000802meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch meta/recipes-devtools/python/python_2.7.15.bb+70 -00 replies
2/2python: backport patch to fix CVE-2018-14647meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch meta/recipes-devtools/python/python_2.7.15.bb+99 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/2] python: fix two CVEs

The following changes since commit 7e8056d96ebe85d72bc4cb961e5766968db2ece2:

systemtap: Fix typo in chown command (2018-10-17 13:41:12 +0100)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib ChenQi/python-cve
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=ChenQi/python-cve

Chen Qi (2):
python: backport patch to fix CVE-2018-1000802
python: backport patch to fix CVE-2018-14647

 ...23-Use-XML_SetHashSalt-in-_elementtree-GH.patch | 98 ++++++++++++++++++++++
 ...34540-Convert-shutil._call_external_zip-t.patch | 69 +++++++++++++++
 meta/recipes-devtools/python/python_2.7.15.bb      |  2 +
 3 files changed, 169 insertions(+)
 create mode 100644 meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch
 create mode 100644 meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch
Signature · 1 line
1.9.1

Read the cover letter in its thread