diff options
| author |   Narpat Mali <narpat.mali@windriver.com> | 2023-08-02 17:57:11 +0000 |
|---|---|---|
| committer |   Steve Sakoman <steve@sakoman.com> | 2023-08-09 05:52:30 -1000 |
| commit | 98abbe3394638c6ce795b34247a9e49120e4ffba (patch) | |
| tree | af5a8c2c91044c015ebf7cfaf665caf6cee6e8d9 /meta/recipes-devtools/python/python3-certifi_2021.10.8.bb | |
| parent | e1a604db8d2cf8782038b4016cc2e2052467333b (diff) | |
| download | openembedded-core-contrib-98abbe3394638c6ce795b34247a9e49120e4ffba.tar.gz | |
python3-certifi: fix CVE-2023-37920
Certifi is a curated collection of Root Certificates for validating
the trustworthiness of SSL certificates while verifying the identity
of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra"
root certificates. e-Tugra's root certificates were subject to an
investigation prompted by reporting of security issues in their systems.
Certifi 2023.07.22 removes root certificates from "e-Tugra" from the
root store.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-37920
https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/recipes-devtools/python/python3-certifi_2021.10.8.bb')
| -rw-r--r-- | meta/recipes-devtools/python/python3-certifi_2021.10.8.bb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/meta/recipes-devtools/python/python3-certifi_2021.10.8.bb b/meta/recipes-devtools/python/python3-certifi_2021.10.8.bb index 57bd59ba44..eb1574adf6 100644 --- a/meta/recipes-devtools/python/python3-certifi_2021.10.8.bb +++ b/meta/recipes-devtools/python/python3-certifi_2021.10.8.bb @@ -7,7 +7,9 @@ HOMEPAGE = " http://certifi.io/" LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=67da0714c3f9471067b729eca6c9fbe8" -SRC_URI += "file://CVE-2022-23491.patch" +SRC_URI += "file://CVE-2022-23491.patch \ + file://CVE-2023-37920.patch \ + " SRC_URI[sha256sum] = "78884e7c1d4b00ce3cea67b44566851c4343c120abd683433ce934a68ea58872" |