| Message ID | 20181029164157.13253-1-ross.burton@intel.com |
|---|---|
| State | Accepted |
| Commit | 67f9e9045ab91a9df15876ad73e44ff98f11bf59 |
| Headers | show |
| Series | python: add missing CVE tag to patches | expand |
diff --git a/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch b/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch index 42c64caaee4..3c0d6622966 100644 --- a/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch +++ b/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch @@ -19,9 +19,7 @@ Co-authored-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue34623 Upstream-Status: Backport - -Fix CVE-2018-14647 - +CVE: CVE-2018-14647 Signed-off-by: Chen Qi <Qi.Chen@windriver.com> --- Include/pyexpat.h | 4 +++- diff --git a/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch b/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch index e6fe5f2cc46..125db8512a9 100644 --- a/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch +++ b/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch @@ -5,9 +5,7 @@ Subject: [PATCH] closes bpo-34540: Convert shutil._call_external_zip to use subprocess rather than distutils.spawn. (GH-8985) Upstream-Status: Backport - -Fix CVE-2018-1000802 - +CVE: CVE-2018-1000802 Signed-off-by: Chen Qi <Qi.Chen@windriver.com> --- Lib/shutil.py | 16 ++++++++++------
Signed-off-by: Ross Burton <ross.burton@intel.com> --- .../0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch | 4 +--- .../0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch | 4 +--- 2 files changed, 2 insertions(+), 6 deletions(-) -- 2.11.0 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core