| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
| |
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-26112
The fix[1] is already included in the recipe version (5.0.9),
the CVE can be marked as patched.
[1]: https://github.com/DiffSK/configobj/commit/7c618b0bbaff6ecaca51a6f05b29795d1377a4a5
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
The related CVEs are tracked with configobj_peroject:configobj CPE in the
database, and the default python:configobj CPE doesn't match relevant entries.
Set CVE_PRODUCT accordingly.
See CVE db query:
sqlite> select * from products where product like '%configobj%';
CVE-2023-26112|configobj_project|configobj|-|||
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
| |
|
|
|
| |
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Tested on qemux86-64 and qemuarm64
- Added ptest into PTESTS_FAST_META_PYTHON
- The PyPi package name defaults to PN without the python3- prefix, so there is no need to set PYPI_PACKAGE as configobj, it is by default.
Ptest result:
=============
qemux86-64:
Testsuite summary
TOTAL: 75
PASS: 75
SKIP: 0
XFAIL: 0
FAIL: 0
XPASS: 0
ERROR: 0
DURATION: 12
END: /usr/lib/python3-configobj/ptest
2024-10-11T12:59
STOP: ptest-runner
TOTAL: 1 FAIL: 0
qemuarm64:
Testsuite summary
TOTAL: 75
PASS: 75
SKIP: 0
XFAIL: 0
FAIL: 0
XPASS: 0
ERROR: 0
DURATION: 9
END: /usr/lib/python3-configobj/ptest
2024-10-11T12:56
STOP: ptest-runner
TOTAL: 1 FAIL: 0
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
License-Update: Drop extra '2014' in LICENSE file.
Changelog:
===========
- Address CVE-2023-26112 ReDoS
- Drop Python 2 support and compatibility code
- Extra 2014
- setup.py: fix license tag
- Update minimum python to 3.7 everywhere, and add 3.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|