From b99a386cd1398f1272798bbe3e4fc6c1be560e36 Mon Sep 17 00:00:00 2001 From: Martin Jansa Date: Tue, 10 May 2022 18:30:12 +0200 Subject: python3-cryptography: backport 3 changes to fix CVE-2020-36242 * backport the actual code change from https://github.com/pyca/cryptography/pull/5747 without the docs and CI changes (which aren't applicable on old 2.8 version) and backport 2 older changes to make this fix applicable on 2.8. Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster --- meta-python/recipes-devtools/python/python3-cryptography_2.8.bb | 3 +++ 1 file changed, 3 insertions(+) (limited to 'meta-python/recipes-devtools/python/python3-cryptography_2.8.bb') diff --git a/meta-python/recipes-devtools/python/python3-cryptography_2.8.bb b/meta-python/recipes-devtools/python/python3-cryptography_2.8.bb index c75dabb974..e50c97df45 100644 --- a/meta-python/recipes-devtools/python/python3-cryptography_2.8.bb +++ b/meta-python/recipes-devtools/python/python3-cryptography_2.8.bb @@ -11,6 +11,9 @@ SRC_URI[sha256sum] = "3cda1f0ed8747339bbdf71b9f38ca74c7b592f24f65cdb3ab3765e4b02 SRC_URI += " \ file://run-ptest \ + file://0001-chunked-update_into-5419.patch \ + file://0002-chunking-didn-t-actually-work-5499.patch \ + file://0003-correct-buffer-overflows-cause-by-integer-overflow-i.patch \ " inherit pypi setuptools3 -- cgit v1.2.3-54-g00ecf