diff options
| author | Narpat Mali <narpat.mali@windriver.com> | 2023-06-01 17:52:55 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2023-06-03 07:55:37 -0400 |
| commit | f95484417e3d3e65ca15b460ba71dfd35773f0e4 (patch) | |
| tree | eca675c9c075bba486532784295906acecff1ff7 /meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb | |
| parent | c6ae6d504d1604d5302ef8e39eb7589d2e972ba0 (diff) | |
| download | meta-openembedded-f95484417e3d3e65ca15b460ba71dfd35773f0e4.tar.gz | |
python3-m2crypto: fix for CVE-2020-25657
A flaw was found in all released versions of m2crypto, where they are
vulnerable to Bleichenbacher timing attacks in the RSA decryption API
via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest
threat from this vulnerability is to confidentiality.
Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb b/meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb index 51a0dd676e..155a9066ca 100644 --- a/meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb +++ b/meta-python/recipes-devtools/python/python3-m2crypto_0.38.0.bb | |||
| @@ -10,6 +10,7 @@ SRC_URI += "file://0001-setup.py-link-in-sysroot-not-in-host-directories.patch \ | |||
| 10 | file://cross-compile-platform.patch \ | 10 | file://cross-compile-platform.patch \ |
| 11 | file://avoid-host-contamination.patch \ | 11 | file://avoid-host-contamination.patch \ |
| 12 | file://0001-setup.py-address-openssl-3.x-build-issue.patch \ | 12 | file://0001-setup.py-address-openssl-3.x-build-issue.patch \ |
| 13 | file://CVE-2020-25657.patch \ | ||
| 13 | " | 14 | " |
| 14 | SRC_URI[sha256sum] = "99f2260a30901c949a8dc6d5f82cd5312ffb8abc92e76633baf231bbbcb2decb" | 15 | SRC_URI[sha256sum] = "99f2260a30901c949a8dc6d5f82cd5312ffb8abc92e76633baf231bbbcb2decb" |
| 15 | 16 | ||