mirror of
https://git.yoctoproject.org/poky
synced 2026-03-27 07:02:22 +01:00
016a0b830e
Source: OpenEmbedded.org MR: 98320, 98319 Type: Security Fix Disposition: Backport from https://git.openembedded.org/openembedded-core/commit/meta/recipes-devtools/python/python_2.7.16.bb?id=9d23b982fa4e0290761b3d15f6959779fed72ad6 ChangeID: e79b6fe3b7b4253bf0d76b029070ae869d5234bd Description: Fixes: CVE-2019-9948 CVE-2019-9636 CVE-2019-9940 is a dup of 9948 per python.org CVE-2019-9947 appears to be a dup of 9940 per https://bugs.python.org/issue30458#msg295067 (From OE-Core rev: e7bdff05da6075efc21c5ac9492b06e481e5a239) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> [Minor clean up for thud] Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
29 lines
1.1 KiB
Diff
29 lines
1.1 KiB
Diff
From 06b5ee585d6e76bdbb4002f642d864d860cbbd2b Mon Sep 17 00:00:00 2001
|
|
From: Steve Dower <steve.dower@python.org>
|
|
Date: Tue, 12 Mar 2019 08:23:33 -0700
|
|
Subject: [PATCH] bpo-36216: Only print test messages when verbose
|
|
|
|
CVE: CVE-2019-9636
|
|
|
|
Upstream-Status: Backport https://github.com/python/cpython/pull/12291/commits/06b5ee585d6e76bdbb4002f642d864d860cbbd2b
|
|
|
|
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
|
|
---
|
|
Lib/test/test_urlparse.py | 3 ++-
|
|
1 file changed, 2 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/Lib/test/test_urlparse.py b/Lib/test/test_urlparse.py
|
|
index 73b0228ea8e3..1830d0b28688 100644
|
|
--- a/Lib/test/test_urlparse.py
|
|
+++ b/Lib/test/test_urlparse.py
|
|
@@ -644,7 +644,8 @@ def test_urlsplit_normalization(self):
|
|
for scheme in [u"http", u"https", u"ftp"]:
|
|
for c in denorm_chars:
|
|
url = u"{}://netloc{}false.netloc/path".format(scheme, c)
|
|
- print "Checking %r" % url
|
|
+ if test_support.verbose:
|
|
+ print "Checking %r" % url
|
|
with self.assertRaises(ValueError):
|
|
urlparse.urlsplit(url)
|
|
|