mirror of
https://git.yoctoproject.org/poky
synced 2026-04-04 14:02:22 +02:00
python3-pycryptodome: Fix CVE-2023-52323
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. References: https://security-tracker.debian.org/tracker/CVE-2023-52323 https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst (From OE-Core rev: 04c9b6b081914005209bac8eeb9f417e7b989cca) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
committed by
Steve Sakoman
parent
d83cb2d0e5
commit
e17cf6a549
@@ -3,3 +3,4 @@ inherit setuptools3
|
||||
|
||||
SRC_URI[sha256sum] = "e04e40a7f8c1669195536a37979dd87da2c32dbdc73d6fe35f0077b0c17c803b"
|
||||
|
||||
SRC_URI += "file://CVE-2023-52323.patch"
|
||||
|
||||
Reference in New Issue
Block a user