python: backport patch to fix CVE-2018-1000802

Backport a patch to fix the following CVE.

CVE: CVE-2018-1000802

(From OE-Core rev: c0343f1035af98cb451eea0de94c16fe89ffdf48)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Chen Qi
2018-10-19 10:43:14 +08:00
committed by Richard Purdie
parent c1f186fe12
commit cdec724312
2 changed files with 70 additions and 0 deletions

View File

@@ -31,6 +31,7 @@ SRC_URI += "\
file://pass-missing-libraries-to-Extension-for-mul.patch \
file://support_SOURCE_DATE_EPOCH_in_py_compile_2.7.patch \
file://float-endian.patch \
file://0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch \
"
S = "${WORKDIR}/Python-${PV}"