From 103663075ebc916958079cb2c4b350eb2222894b Mon Sep 17 00:00:00 2001 From: Sona Sarmadi Date: Fri, 16 Jan 2015 11:16:03 +0100 Subject: python: Disables SSLv3 This is related to "SSLv3 POODLE vulnerability" CVE-2014-3566 Building python without SSLv3 support when openssl is built without any support for SSLv3 (e.g. by adding EXTRA_OECONF = " -no-ssl3" in the openssl recipes). Backport from: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768611#22 [python2.7-nossl3.patch] only Modules/_ssl.c is backported. References: https://bugzilla.yoctoproject.org/show_bug.cgi?id=7015 https://bugzilla.yoctoproject.org/show_bug.cgi?id=6843 http://bugs.python.org/issue22638 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 (From OE-Core rev: 3462cac82cf0ab32e5e530f543b14fdcc211c678) Signed-off-by: Sona Sarmadi Signed-off-by: Richard Purdie --- meta/recipes-devtools/python/python_2.7.3.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta/recipes-devtools/python/python_2.7.3.bb') diff --git a/meta/recipes-devtools/python/python_2.7.3.bb b/meta/recipes-devtools/python/python_2.7.3.bb index 90b397f3ce..a4c95c18e0 100644 --- a/meta/recipes-devtools/python/python_2.7.3.bb +++ b/meta/recipes-devtools/python/python_2.7.3.bb @@ -40,6 +40,7 @@ SRC_URI += "\ file://posix_close.patch \ file://remove-BOM-insection-code.patch \ file://python-2.7.3-CVE-2014-7185.patch \ + file://python2.7.3-nossl3.patch \ " S = "${WORKDIR}/Python-${PV}" -- cgit v1.2.3-54-g00ecf