helium-3rd-party/poky
1
0 Fork 0
mirror of git://git.yoctoproject.org/poky synced 2026-10-23 04:25:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

python-pip: CVE-2021-3572 Incorrect handling of unicode separators in git references

Browse Source 
Source: https://github.com/pypa/pip
MR: 113864
Type: Security Fix
Disposition: Backport from https://github.com/pypa/pip/commit/e46bdda9711392fec0c45c1175bae6db847cb30b
ChangeID: 717948e217d6219d1f03afb4d984342d7dea4636
Description:
       CVE-2021-3572 python-pip: Incorrect handling of unicode separators in git references.

(From OE-Core rev: 841a8fb5b6351f79a4d756232a544d1a6480c562)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Hitendra Prajapati authored and Richard Purdie committed 2022-06-24 23:57:45 +01:00
1 parent 5582ab6aae
commit 2ae3d43628
2 files changed
+49
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

meta/recipes-devtools/python/python3-pip_20.0.2.bb
+1
View File
@@ -6,6 +6,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=8ba06d529c955048e5ddd7c45459eb2e"
DEPENDS += "python3 python3-setuptools-native"
SRC_URI = "file://CVE-2021-3572.patch "
SRC_URI[md5sum] = "7d42ba49b809604f0df3d55df1c3fd86"
SRC_URI[sha256sum] = "7db0c8ea4c7ea51c8049640e8e6e7fde949de672bfa4949920675563a5a6967f"