Sona Sarmadi 97e9be8130 python: CVE-2014-7185 ...

Integer overflow in bufferobject.c in Python before 2.7.8 allows
context-dependent attackers to obtain sensitive information from
process memory via a large size and offset in a "buffer" function.

PoC:

(From OE-Core rev: 2590eb53a6dac90cba52edd09ea56a6bdf4c4533)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-04-27 15:20:45 +01:00

..

01-use-proper-tools-for-cross-build.patch

python: Fix various contamination issues leading to broken/missing c modules

2012-04-23 23:04:43 +01:00

03-fix-tkinter-detection.patch

recipes: Update upstream-status of patches

2011-05-13 11:02:19 +01:00

05-enable-ctypes-cross-build.patch

recipes: Update upstream-status of patches

2011-05-13 11:02:19 +01:00

06-avoid_usr_lib_termcap_path_in_linking.patch

python, python-native: upgrade from 2.6.6 to 2.7.2

2011-10-31 22:03:20 +00:00

06-ctypes-libffi-fix-configure.patch

python, python-native: upgrade from 2.6.6 to 2.7.2

2011-10-31 22:03:20 +00:00

add-md5module-support.patch

python: add md5module support

2012-01-03 12:14:30 +00:00

avoid_warning_about_tkinter.patch

python: Add patch to avoid warning about _tkinter

2012-04-26 10:05:16 +01:00

avoid_warning_for_sunos_specific_module.patch

python: Add patch to avoid warning about sunaudiodev module

2012-04-26 10:05:17 +01:00

builddir.patch

python: Resolve intermediate staging issues

2012-11-18 16:42:07 +00:00

cgi_py.patch

python: Fix cgi.py runtime issue

2011-09-22 05:07:00 +01:00

check-if-target-is-64b-not-host.patch

python: Add patch for 64bit platform

2012-04-26 10:05:16 +01:00

CVE-2013-4073_py27.patch

python: Backport 2 CVE from upstream

2013-08-30 18:06:32 +01:00

fix_for_using_different_libdir.patch

python: upgrade from 2.7.2 to 2.7.3

2012-05-03 15:48:04 +01:00

fix-makefile-for-ptest.patch

python: Add ptest

2013-07-24 11:35:34 +01:00

gcc-4.8-fix-configure-Wformat.patch

python: -Wformat is needed by gcc 4.8

2013-06-14 12:44:37 +01:00

host_include_contamination.patch

python: Fix build failure of python-elementtree on x86_64

2012-02-08 00:50:28 +00:00

multilib.patch

Add Upstream-Status to patches

2012-01-03 12:14:31 +00:00

parallel-makeinst-create-bindir.patch

python, python-native: fix PARALLEL_MAKEINST failure

2013-12-03 17:45:53 +00:00

pypirc-secure.patch

python: Backport 2 CVE from upstream

2013-08-30 18:06:32 +01:00

python2.7.3-nossl3.patch

python: Disables SSLv3

2015-02-06 14:56:07 +00:00

python-2.7.3-berkeley-db-5.3.patch

python: Add Upstream-Status entries for bsddb patches, no code changes

2012-08-17 13:10:07 +01:00

python-2.7.3-CVE-2012-2135.patch

Python: Fix for CVE-2012-2135

2013-03-04 09:58:17 +00:00

python-2.7.3-CVE-2013-1752-smtplib-fix.patch

python: Backport CVE-2013-1752 fix from upstream

2014-02-28 14:01:15 +00:00

python-2.7.3-CVE-2014-1912.patch

python: Fix CVE-2014-1912

2014-04-09 09:53:14 +01:00

python-2.7.3-CVE-2014-7185.patch

python: CVE-2014-7185

2015-04-27 15:20:45 +01:00

python-2.7.3-remove-bsdb-rpath.patch

python: Add Upstream-Status entries for bsddb patches, no code changes

2012-08-17 13:10:07 +01:00

python-fix-build-error-with-Readline-6.3.patch

python: fix build error with Readline 6.3

2014-04-04 11:53:51 +01:00

remove_sqlite_rpath.patch

python: fix sqlite RPATH issue

2011-09-29 16:57:30 +01:00

run-ptest

python: Add ptest

2013-07-24 11:35:34 +01:00

search_db_h_in_inc_dirs_and_avoid_warning.patch

python: Add patch to search for db.h in inc_dirs and remove warning

2012-04-26 10:05:16 +01:00

setup_py_skip_cross_import_check.patch

python: skip setup.py 'import check' when cross-compiling

2011-11-08 21:48:30 +00:00

setuptweaks.patch

python: Fix various contamination issues leading to broken/missing c modules

2012-04-23 23:04:43 +01:00

sitecustomize.py

Major layout change to the packages directory

2010-08-27 15:29:45 +01:00