mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-02-25 10:59:41 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
015bfc5971120e3483572cb4eaf0cb7c15b64349
poky/meta/recipes-devtools
History
Martin Jansa 016a0b830e python: add a fix for CVE-2019-9948 and CVE-2019-9636 
Source: OpenEmbedded.org
MR: 98320, 98319
Type: Security Fix
Disposition: Backport from https://git.openembedded.org/openembedded-core/commit/meta/recipes-devtools/python/python_2.7.16.bb?id=9d23b982fa4e0290761b3d15f6959779fed72ad6
ChangeID: e79b6fe3b7b4253bf0d76b029070ae869d5234bd
Description:

Fixes:
CVE-2019-9948
CVE-2019-9636

CVE-2019-9940 is a dup of 9948 per python.org
CVE-2019-9947 appears to be a dup of 9940 per https://bugs.python.org/issue30458#msg295067

(From OE-Core rev: e7bdff05da6075efc21c5ac9492b06e481e5a239)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
[Minor clean up for thud]
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-27 18:05:18 +01:00
..
apt
apt: update SRC_URI
2018-11-07 23:08:55 +00:00
autoconf
autoconf: update runtime perl module dependencies
2018-08-21 14:49:42 +01:00
autoconf-archive
autoconf-archive: update to version to 2018.03.13
2018-05-04 13:28:01 +01:00
automake
automake: fix race in parallel builds
2018-07-30 12:44:34 +01:00
binutils
binutils: bfd doesn't handle ELF compressed data alignment
2019-02-06 16:38:31 +00:00
bison
nativesdk-bison: Add to nativesdk-packagegroup-sdk-host and set BISON_PKGDATADIR
2018-10-04 14:21:41 +01:00
bootchart2
bootchart2: Update to master-tip
2018-08-08 10:51:59 +01:00
btrfs-tools
btrfs-tools: update to 4.17.1
2018-09-10 12:13:06 +01:00
build-compare
oe-core: take UPSTREAM_CHECK_COMMITS into use where possible
2017-11-30 10:49:22 +00:00
ccache
ccache: 3.3.5 -> 3.4.2
2018-07-05 00:22:08 +01:00
cdrtools
cdrtools-native: fix upstream version check
2017-12-02 11:25:33 +00:00
chrpath
chrpath: Alioth is dead, use DEBIAN_MIRROR
2018-06-27 13:55:21 +01:00
cmake
cmake: Upgrade 3.12.1 -> 3.12.2
2018-09-21 18:45:46 -07:00
createrepo-c
createrepo-c: Fix setup of logging (log domains)
2019-01-08 20:14:44 +00:00
cve-check-tool
cve-check-tool: correctly exported web proxies
2018-02-24 10:31:46 +00:00
desktop-file-utils
desktop-file-utils: allow target/nativesdk build, not just native
2018-08-07 12:13:03 +01:00
devel-config
Remove $COREBASE/LICENSE from LIC_FILES_CHKSUM
2016-10-28 16:15:18 +01:00
diffstat
diffstat: 1.61 -> 1.62
2018-08-23 18:02:23 +01:00
distcc
distcc: 3.3 -> 3.3.2
2018-08-23 18:02:23 +01:00
dmidecode
dmidecode: correct docdir
2018-06-27 13:55:21 +01:00
dnf
dnf: default to disable systemd units
2018-06-18 11:07:57 +01:00
docbook-xml
docbook-xml: correct typo "do_configre"
2017-02-23 12:49:50 -08:00
dosfstools
meta: start to ignore the largefile distro feature
2017-03-08 11:52:56 +00:00
dpkg
dpkg: Backport riscv support
2018-03-20 09:59:32 +00:00
dwarfsrcfiles
dwarfsrcfiles: fix typo: debig -> debug
2018-07-10 17:33:00 +01:00
e2fsprogs
e2fsprogs: Skip slow ptest tests
2019-05-22 00:31:48 +01:00
elfutils
elfutils: Security fixes CVE-2019-7146,7149,7150
2019-07-27 18:05:17 +01:00
expect
expect: upgrade 5.45.3 -> 5.45.4
2018-03-06 06:43:10 -08:00
fdisk
gptfdisk: Use PACKAGECONFIG to control ncurses and popt dependencies
2018-10-10 12:47:34 +01:00
file
file: alternatify file
2018-10-18 23:26:35 +01:00
flex
flex: create separate package for libfl
2018-03-08 10:39:32 -08:00
gcc
libgcc/gcc-runtime: Disable thumb mode on armv6
2018-10-18 10:56:55 +01:00
gdb
gdb: Remove long ago upstreamed patch
2019-01-08 20:14:44 +00:00
git
git: upgrade 2.18.0 -> 2.18.1
2018-10-29 17:26:47 +00:00
glide
glide: Minor update to 0.13.2
2018-10-25 14:53:44 +01:00
gnu-config
gnu-config: update to 2018-07-13
2018-07-26 13:16:40 +01:00
go
go 1.9/1.11: fix textrel qa warning for non mips arch
2019-01-08 20:14:44 +00:00
help2man
help2man-native: 1.47.5 -> 1.47.6
2018-07-04 00:02:16 +01:00
i2c-tools
i2c-tools: upgrade 4.0 -> 4.1
2019-02-06 16:38:30 +00:00
icecc-create-env
icecc-create-env: Add extra tools option
2018-04-13 16:58:07 +01:00
icecc-toolchain
icecc-env: don't raise error when icecc not installed
2019-02-25 22:27:38 +00:00
intltool
intltool: refresh patches
2018-03-09 09:17:03 -08:00
json-c
json-c: upgrade to 0.13.1
2018-05-11 07:49:37 +01:00
libcomps
rpm/dnf: fix Upstream-Status to reflect upstream submission status
2017-07-24 09:13:30 +01:00
libdnf
libdnf: update to 0.11.1
2018-01-02 17:24:37 +00:00
librepo
librepo: disable building of tests and docs
2018-03-25 09:40:42 +01:00
libtool
libtool-cross: Handle ccache sstate 'infection' issues
2018-08-14 11:36:31 +01:00
llvm
llvm: Enable AMDGPU backend for native/native-sdk builds too
2018-08-21 14:49:42 +01:00
m4
m4: Workaround gnulib's fseeko.c implementation
2018-08-08 10:51:59 +01:00
make
make: add missing Signed-off-by
2018-01-30 12:53:16 +00:00
makedevs
makedevs: don't restrict device node paths to 40 characters
2016-09-16 15:24:02 +01:00
meson
meson: Correct use of the _append operator
2019-01-08 20:14:42 +00:00
mklibs
mklibs-native: refresh patches
2018-03-11 06:27:01 -07:00
mmc
mmc-utils: Fix string overflow error
2018-03-31 09:48:42 +01:00
mtd
mtd-utils: Revert "Return correct error number in ubi_get_vol_in"
2018-07-31 22:47:35 +01:00
mtools
mtools: Fix build with clang
2018-09-20 05:41:32 -07:00
nasm
nasm: fix CVE-2018-1000667
2018-11-07 23:08:54 +00:00
ninja
ninja: Upgrade from 1.7.2 to major release 1.8.2
2018-02-06 11:06:29 +00:00
opkg
opkg: add strict package matching on removal patch
2018-09-06 10:36:31 +01:00
opkg-utils
opkg-utils: backport a patch to fix a sstate timestamp issue
2019-05-22 00:31:48 +01:00
orc
orc: upgrade to 0.4.28
2017-12-18 18:03:56 +00:00
packagegroups
packagegroup-core-device-devel: add binutils-symlinks
2016-06-16 11:11:40 +01:00
patch
patch: fix CVE-2018-6952
2018-08-23 07:50:01 +01:00
patchelf
patchelf: fix segfault for binaries linked by gold
2017-07-24 09:13:30 +01:00
perl
perl: skip tests that are not useful
2018-10-16 20:35:43 +01:00
pkgconf
pkgconf: don't use alternatives
2018-09-11 10:46:17 +01:00
pkgconfig
pkgconfig: allow kernel to be build with esdk
2017-07-21 22:51:37 +01:00
prelink
prelink: Fix Segmentation fault error when prelink qemu
2018-10-12 16:57:21 +01:00
pseudo
pseudo: Update to gain key bugfixes
2019-05-22 00:31:48 +01:00
python
python: add a fix for CVE-2019-9948 and CVE-2019-9636
2019-07-27 18:05:18 +01:00
python-numpy
python-numpy: set CLEANBROKEN
2018-07-06 22:55:02 +01:00
qemu
qemu: Several CVE fixes
2019-07-27 18:05:18 +01:00
quilt
quilt.inc: minor recipe formatting tweaks
2018-07-06 22:55:02 +01:00
rpm
meta: remove True option to getVar calls (again)
2019-02-06 16:38:31 +00:00
rsync
rsync: merge rsync.inc into the rsync recipe
2018-06-18 11:07:57 +01:00
ruby
ruby: add ptest
2019-05-22 00:31:48 +01:00
run-postinsts
run-postinsts: for dpkg/opkg, do not rely on /etc/*-postinsts
2018-06-18 11:07:58 +01:00
squashfs-tools
squashfs-tools: patch for CVE-2015-4645(4646)
2018-08-29 10:42:48 +01:00
strace
strace: fix ptests
2018-10-09 19:04:02 +01:00
subversion
subversion: Update HOMEPAGE
2018-06-21 09:34:40 +01:00
swig
swig: Remove superfluous python dependency
2018-08-24 07:53:14 +01:00
syslinux
syslinux: refresh patches
2018-03-09 09:17:03 -08:00
systemd-bootchart
systemd-bootchart: upgrade to v233; fix build with musl
2018-01-23 23:43:45 +00:00
tcf-agent
tcf-agent: Disable non-building features on riscv64
2018-09-04 11:03:55 +01:00
tcltk
tcl: update to 8.6.8
2018-02-06 11:06:29 +00:00
unfs3
unfs3: Fix utime for symlink in attr.c
2018-10-12 16:57:21 +01:00
unifdef
unifdef: add UPSTREAM_CHECK_REGEX to filter out development snapshots
2017-02-23 12:49:51 -08:00
vala
vala: update vapigen-wrapper
2018-10-12 16:57:21 +01:00
valgrind
valgrind: Skip vgpreload_memcheck shared object from stripping
2019-01-08 20:14:44 +00:00
xmlto
xmlto: replace fedorahosted.org SRC_URI with pagure.io source
2017-04-05 23:22:12 +01:00