From patchwork Thu Mar 21 12:31:52 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 160783 Delivered-To: patch@linaro.org Received: by 2002:a02:c6d8:0:0:0:0:0 with SMTP id r24csp744444jan; Thu, 21 Mar 2019 05:31:58 -0700 (PDT) X-Google-Smtp-Source: APXvYqw47ff1uSyymjXzcbeCy4hRuSfvXG9OrA75wZXX9bcw6fT7K/N97ADub0YwfIo+Xj7ILuc8 X-Received: by 2002:a17:902:f209:: with SMTP id gn9mr3332635plb.50.1553171518817; Thu, 21 Mar 2019 05:31:58 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1553171518; cv=none; d=google.com; s=arc-20160816; b=rnR6mJGc4+Q94Uz5qt8VbqTNPzV3nQTN3O/SoNXBn32T2HV2smFlxjwScKfBLNuCMV WiiEoU9dKcQ7m5ogGNXm17U5KcDRqa2VVu+Rw9jOwjw43yc+Yqo+V8aAwSixpdIb81it BAdFMO2F3NzLZDjIsLcH+NnO+WcA/6EfDt537q2cvHvys+yXnkEvkJOE3+xNV7DirkJe dHdPnI58eakQiXeuhtxK3SzTVvm35DSiu3urEf1XpiKO5o0E52DuapLrvrVojaf0UenM tVwpCSzgYvdmwtqM7Dy6JhpJ7KmJ3n+lRJa2DwQ+x4hdEgQKFG4+Opt08GUmWpkC7iwP kCUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:message-id:date:to:from:dkim-signature :delivered-to; bh=94P+l2MuIkDZbuDt2NUzH2ajA8LRMGsgB1uC3TFr1Og=; b=U+zvhy6PUnJ1L+FWRqiTQqOFp5eO5p7KCY059CdNto1KMKFX6O07W7Mohnyb3JKOdD b+vX8coWgLeGULCPThyVL9lMxqLS3lTW+gyzaKMikvP9uSBCbOHuHCExTa4OFz7B579O xJTYhHt9zBbZuI2KFoXVBikv1nFnIzsIDKqv+YSqSYr/imHdaMnX0YK24RygRAYjvlti YMKBSD37CA+VHu8C8V5pML+arm9PsdTKSfPVhN8TsQD6s06QJSyNcwypVhAR2rpscaU+ 8tfm0WM1SlU4pKCXZJf/PbMCrOyZK8O22X/E1iZcLBf3V9ME01G08pxanGsu9keUnL2u xgsg== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@intel-com.20150623.gappssmtp.com header.s=20150623 header.b=ZihF3fAm; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id cb2si4667532plb.201.2019.03.21.05.31.58; Thu, 21 Mar 2019 05:31:58 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@intel-com.20150623.gappssmtp.com header.s=20150623 header.b=ZihF3fAm; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: from ec2-34-214-78-129.us-west-2.compute.amazonaws.com (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 8E7C17CF49; Thu, 21 Mar 2019 12:31:56 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mail.openembedded.org (Postfix) with ESMTP id 79EB27CE64 for ; Thu, 21 Mar 2019 12:31:55 +0000 (UTC) Received: by mail-wr1-f42.google.com with SMTP id q1so6408052wrp.0 for ; Thu, 21 Mar 2019 05:31:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel-com.20150623.gappssmtp.com; s=20150623; h=from:to:subject:date:message-id; bh=0gUGPTBDnDc/fdYxg/9v2OEiYyg9NfpZl4ePC/Ue5+k=; b=ZihF3fAmA/N7hwynPpAZmtjAyTRPwbX9bpc8NaqYEpCGenN+tHPQpDXhMJ5LzoWvC9 Q6B3pwd9BGNoQtYhmY72wTr1Dgrbi0CMRfjCkO7xCdQ9XTZE/zarRUO4mSOsuKEUR4CI Kll67QAO9/mFOVmVwBrn/T02kYID/d8HK8ua1EdDUxk+Cn8S3tKBbi12bjrRH9u6iDZU 1HK+6Wz2zO2OWHFswjqk34e+h3UJg+athfbXkAEzd2YRSz3t4d4sIbt0C085tQCWEPuF NRlQUqDfLRGjy0TQybKOHuF9XcjcN1rYl4GJGwJbc082Anf4DpmbS7iPmLNKeWP2pY0a +woA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id; bh=0gUGPTBDnDc/fdYxg/9v2OEiYyg9NfpZl4ePC/Ue5+k=; b=jcz9tf7ljzfAA74uy/8aEtYT4nCd8tSLd4u4znCyRzGUrGDH5ZDL1o0juWJpThgpnK fCrbMLB3hZYhYQsxo93qTulbk/pxmDhn8hjvc75X4gSEWmOpsOVmiZqZ2tbjlYQ4w7e8 C467BOPWJYxU33rqb3vmBkTEcanbDZ0Za/6DB/yyKefEP2dGBgG/gDlN6ZhN/dJcJ2px n+NC0C294QvP1Um2WW0ln44wfNIsyqLWbRS9aVsOG4wjzhutBxg0lhid03+FH/6ugnG7 gakZ2gkoUATSmDSkimJ2zWfQYx0HAyNyagPHLpvIWt7tl3djzD8X1JKj8MNQT0+hhQQx eQyg== X-Gm-Message-State: APjAAAXfKRByOPcTgEWTy3wnN4TzyaVx4CSrbHZEBorVwd+I6Shy6GKW ibwbd/CV0zaPE7TLwXqh8IA9WY/lYrk= X-Received: by 2002:adf:fd04:: with SMTP id e4mr2524946wrr.190.1553171516086; Thu, 21 Mar 2019 05:31:56 -0700 (PDT) Received: from flashheart.burtonini.com (35.106.2.81.in-addr.arpa. [81.2.106.35]) by smtp.gmail.com with ESMTPSA id y5sm1193969wrw.23.2019.03.21.05.31.55 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Mar 2019 05:31:55 -0700 (PDT) From: Ross Burton To: openembedded-core@lists.openembedded.org Date: Thu, 21 Mar 2019 12:31:52 +0000 Message-Id: <20190321123152.3238-1-ross.burton@intel.com> X-Mailer: git-send-email 2.11.0 Subject: [OE-core] [PATCH] python: fix CVE-2018-14647 in python-native too X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Signed-off-by: Ross Burton --- meta/recipes-devtools/python/python-native_2.7.15.bb | 1 + 1 file changed, 1 insertion(+) -- 2.11.0 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-devtools/python/python-native_2.7.15.bb b/meta/recipes-devtools/python/python-native_2.7.15.bb index f00153f0eea..26d67df6b83 100644 --- a/meta/recipes-devtools/python/python-native_2.7.15.bb +++ b/meta/recipes-devtools/python/python-native_2.7.15.bb @@ -17,6 +17,7 @@ SRC_URI += "\ file://parallel-makeinst-create-bindir.patch \ file://revert_use_of_sysconfigdata.patch \ file://0001-python-native-fix-one-do_populate_sysroot-warning.patch \ + file://0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch \ " S = "${WORKDIR}/Python-${PV}"