python3: fix CVE-2022-42919 local privilege escalation via the multiprocessing forkserver start method

Upstream-Status: Backport from eae692eed1

(From OE-Core rev: 9ed7184930707c98afabca8c6b712df874ad659f)

Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Vivek Kumbhar
2022-11-24 17:58:13 +05:30
committed by Richard Purdie
parent b712955b3b
commit 9510218414
2 changed files with 71 additions and 0 deletions

View File

@@ -35,6 +35,7 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \
file://0001-setup.py-Do-not-detect-multiarch-paths-when-cross-co.patch \
file://deterministic_imports.patch \
file://0001-Avoid-shebang-overflow-on-python-config.py.patch \
file://CVE-2022-42919.patch \
"
SRC_URI:append:class-native = " \