From 67f9e9045ab91a9df15876ad73e44ff98f11bf59 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Mon, 29 Oct 2018 16:41:57 +0000 Subject: python: add missing CVE tag to patches Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- .../0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch | 4 +--- .../0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch | 4 +--- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch b/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch index 42c64caaee..3c0d662296 100644 --- a/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch +++ b/meta/recipes-devtools/python/python/0001-2.7-bpo-34623-Use-XML_SetHashSalt-in-_elementtree-GH.patch @@ -19,9 +19,7 @@ Co-authored-by: Christian Heimes https://bugs.python.org/issue34623 Upstream-Status: Backport - -Fix CVE-2018-14647 - +CVE: CVE-2018-14647 Signed-off-by: Chen Qi --- Include/pyexpat.h | 4 +++- diff --git a/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch b/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch index e6fe5f2cc4..125db8512a 100644 --- a/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch +++ b/meta/recipes-devtools/python/python/0001-closes-bpo-34540-Convert-shutil._call_external_zip-t.patch @@ -5,9 +5,7 @@ Subject: [PATCH] closes bpo-34540: Convert shutil._call_external_zip to use subprocess rather than distutils.spawn. (GH-8985) Upstream-Status: Backport - -Fix CVE-2018-1000802 - +CVE: CVE-2018-1000802 Signed-off-by: Chen Qi --- Lib/shutil.py | 16 ++++++++++------ -- cgit 1.2.3-korg