mirror of
https://git.yoctoproject.org/poky
synced 2026-02-05 16:28:43 +01:00
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. References: https://security-tracker.debian.org/tracker/CVE-2023-52323 https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst (From OE-Core rev: 04c9b6b081914005209bac8eeb9f417e7b989cca) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
12 lines
330 B
BlitzBasic
12 lines
330 B
BlitzBasic
require python-pycryptodome.inc
|
|
inherit setuptools3
|
|
|
|
SRC_URI[sha256sum] = "2ce76ed0081fd6ac8c74edc75b9d14eca2064173af79843c24fa62573263c1f2"
|
|
|
|
SRC_URI += "file://CVE-2023-52323.patch"
|
|
|
|
FILES:${PN}-tests = " \
|
|
${PYTHON_SITEPACKAGES_DIR}/Cryptodome/SelfTest/ \
|
|
${PYTHON_SITEPACKAGES_DIR}/Cryptodome/SelfTest/__pycache__/ \
|
|
"
|