mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-10 14:02:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

python3-zipp: fix CVE-2024-5569

Browse Source 
According to [1] which provided the fix link [2], but upstream author
reworked it later [3][4][5]

Backport and rebase all the patches for tracing

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-5569
[2] fd604bd34f
[3] 3cb5609002
[4] f89b93f037
[5] cc61e6140f

(From OE-Core rev: 13bd99e17f0aca108839e81e9aa0b14351116fdf)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
Hongxu Jia
2024-11-28 15:46:44 +08:00
committed by Steve Sakoman
parent e8c505f7a4
commit af06cbf82b
6 changed files with 300 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
meta/recipes-devtools/python/python3-zipp_3.7.0.bb
View File

@@ -9,6 +9,14 @@ DEPENDS += "${PYTHON_PN}-setuptools-scm-native"
inherit pypi python_setuptools_build_meta
SRC_URI += " \
file://0001-Add-SanitizedNames-mixin.patch \
file://0002-Employ-SanitizedNames-in-CompleteDirs.-Fixes-broken-.patch \
file://0003-Removed-SanitizedNames.patch \
file://0004-Address-infinite-loop-when-zipfile-begins-with-more-.patch \
file://0005-Prefer-simpler-path.rstrip-to-consolidate-checks-for.patch \
"
DEPENDS += "${PYTHON_PN}-toml-native"
RDEPENDS:${PN} += "${PYTHON_PN}-compression \