Wenzong Fan 07a31ed4d1 python: Fix CVE-2014-7185 ...

Integer overflow in bufferobject.c in Python before 2.7.8 allows
context-dependent attackers to obtain sensitive information from
process memory via a large size and offset in a "buffer" function.

This back-ported patch fixes CVE-2014-7185

(From OE-Core rev: 49ceed974e39ab8ac4be410e5caa5e1ef7a646d9)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2014-11-20 14:08:10 +00:00

..

01-use-proper-tools-for-cross-build.patch

python: Fix various contamination issues leading to broken/missing c modules

2012-04-23 23:04:43 +01:00

03-fix-tkinter-detection.patch

…

05-enable-ctypes-cross-build.patch

…

06-avoid_usr_lib_termcap_path_in_linking.patch

…

06-ctypes-libffi-fix-configure.patch

…

add-md5module-support.patch

python: add md5module support

2012-01-03 12:14:30 +00:00

avoid_warning_about_tkinter.patch

python: Forcibly disable tk

2014-07-17 12:28:51 +01:00

avoid_warning_for_sunos_specific_module.patch

python: Add patch to avoid warning about sunaudiodev module

2012-04-26 10:05:17 +01:00

builddir.patch

python: Resolve intermediate staging issues

2012-11-18 16:42:07 +00:00

cgi_py.patch

…

check-if-target-is-64b-not-host.patch

python: Add patch for 64bit platform

2012-04-26 10:05:16 +01:00

CVE-2013-4073_py27.patch

python: Backport 2 CVE from upstream

2013-08-30 18:06:32 +01:00

fix_for_using_different_libdir.patch

python: upgrade from 2.7.2 to 2.7.3

2012-05-03 15:48:04 +01:00

fix-makefile-for-ptest.patch

python: Add ptest

2013-07-24 11:35:34 +01:00

gcc-4.8-fix-configure-Wformat.patch

python: -Wformat is needed by gcc 4.8

2013-06-14 12:44:37 +01:00

host_include_contamination.patch

python: Fix build failure of python-elementtree on x86_64

2012-02-08 00:50:28 +00:00

json-flaw-fix.patch

python: fix _json module arbitrary process memory read vulnerability

2014-07-25 15:34:01 +01:00

multilib.patch

Add Upstream-Status to patches

2012-01-03 12:14:31 +00:00

parallel-makeinst-create-bindir.patch

python, python-native: fix PARALLEL_MAKEINST failure

2013-12-03 17:45:53 +00:00

posix_close.patch

python: Fix build on musl

2014-08-15 18:21:48 +01:00

pypirc-secure.patch

python: Backport 2 CVE from upstream

2013-08-30 18:06:32 +01:00

python-2.7.3-berkeley-db-5.3.patch

python: Add Upstream-Status entries for bsddb patches, no code changes

2012-08-17 13:10:07 +01:00

python-2.7.3-CVE-2012-2135.patch

Python: Fix for CVE-2012-2135

2013-03-04 09:58:17 +00:00

python-2.7.3-CVE-2013-1752-smtplib-fix.patch

python: Backport CVE-2013-1752 fix from upstream

2014-02-28 14:01:15 +00:00

python-2.7.3-CVE-2014-1912.patch

python: Fix CVE-2014-1912

2014-04-09 09:53:14 +01:00

python-2.7.3-CVE-2014-7185.patch

python: Fix CVE-2014-7185

2014-11-20 14:08:10 +00:00

python-2.7.3-remove-bsdb-rpath.patch

python: Add Upstream-Status entries for bsddb patches, no code changes

2012-08-17 13:10:07 +01:00

python-fix-build-error-with-Readline-6.3.patch

python: fix build error with Readline 6.3

2014-04-04 11:53:51 +01:00

remove_sqlite_rpath.patch

…

remove-BOM-insection-code.patch

python-2.7.3:remove BOM insertion code

2014-11-04 10:27:11 +00:00

run-ptest

python: Add ptest

2013-07-24 11:35:34 +01:00

search_db_h_in_inc_dirs_and_avoid_warning.patch

python: Add patch to search for db.h in inc_dirs and remove warning

2012-04-26 10:05:16 +01:00

setup_py_skip_cross_import_check.patch

python: skip setup.py 'import check' when cross-compiling

2011-11-08 21:48:30 +00:00

setuptweaks.patch

python: Fix various contamination issues leading to broken/missing c modules

2012-04-23 23:04:43 +01:00

sitecustomize.py

…