helium-3rd-party/meta-openembedded
1
0 Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-11-03 20:01:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

python3-lxml: Security fix CVE-2022-2309

Browse Source 
CVE-2022-0934:
lxml: NULL Pointer Dereference in lxml

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-2309

Patch from:
https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
This commit is contained in:
Yue Tao authored and Armin Kuster committed 2022-07-26 07:08:35 -07:00
1 parent 2763eaf35f
commit cb4e7fb4b0
2 files changed
+101 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

meta-python/recipes-devtools/python/python3-lxml_4.8.0.bb
+2 -1
View File
@@ -20,7 +20,8 @@ DEPENDS += "libxml2 libxslt"
SRC_URI[sha256sum] = "f63f62fc60e6228a4ca9abae28228f35e1bd3ce675013d1dfb828688d50c6e23"
SRC_URI += "${PYPI_SRC_URI}"
SRC_URI += "${PYPI_SRC_URI} \
file://CVE-2022-2309.patch "
inherit pkgconfig pypi setuptools3
# {standard input}: Assembler messages: