Soumya Sambu 9541ad9650 python3: Fix CVE-2024-7592 ...

There is a LOW severity vulnerability affecting CPython, specifically the
'http.cookies' standard library module. When parsing cookies that contained
backslashes for quoted characters in the cookie value, the parser would use
an algorithm with quadratic complexity, resulting in excess CPU resources
being used while parsing the value.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-7592

Upstream-Patch:
dcc3eaef98

(From OE-Core rev: 3bb9684eef5227e7b1280ee9051884310b0d0b7f)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-09-09 06:08:10 -07:00

..

python3

python3: Fix CVE-2024-7592

2024-09-09 06:08:10 -07:00

python3-atomicwrites

…

python3-attrs

python3-attrs: disable Hypothesis deadline

2024-03-01 09:32:13 +00:00

python3-bcrypt

python3-bcrypt: Fix build break on arches without 64 bit atomics

2024-02-29 10:26:13 +00:00

python3-calver

…

python3-certifi

python3-certifi: Fix CVE-2024-39689

2024-08-19 06:09:14 -07:00

python3-click

python3-click: Copy recipe from meta-python

2023-09-27 11:47:42 +01:00

python3-cryptography

python3-cryptography: upgrade 41.0.7 to 42.0.2

2024-02-15 09:18:09 +00:00

python3-dtc

python3-dtc: add from meta-virtualization

2023-07-25 15:27:33 +01:00

python3-hypothesis

…

python3-installer

…

python3-jinja2

…

python3-jsonpointer

python3-jsonpointer: upgrade to 2.4

2023-07-10 11:36:34 +01:00

python3-license-expression

python3-license-expression: Fix the ptest failure

2023-12-21 10:38:30 +00:00

python3-markupsafe

…

python3-maturin

python3-maturin: Recognise riscv32 architecture

2024-02-29 10:26:13 +00:00

python3-more-itertools

…

python3-numpy

python3-numpy: upgrade 1.26.3 -> 1.26.4

2024-02-09 13:55:06 +00:00

python3-pbr

…

python3-pip

python3-pip: upgrade 23.3.2 -> 24.0

2024-03-01 09:28:51 +00:00

python3-pluggy

…

python3-pyasn1

…

python3-pytz

…

python3-pyyaml

python3-pyyaml: enable ptest

2024-02-10 14:13:24 +00:00

python3-scons

…

python3-setuptools

python3-setuptools: Fix CVE-2024-6345

2024-09-09 06:08:10 -07:00

python3-smartypants

…

python3-trove-classifiers

…

python3-wcwidth

…

python3-webcolors

…

python3-xmltodict

python3-xmltodict: Copy recipe from meta-python

2023-09-27 11:47:42 +01:00

python-rfc3986-validator

…

python3_3.12.4.bb

python3: Fix CVE-2024-7592

2024-09-09 06:08:10 -07:00

python3-alabaster_0.7.16.bb

python3-alabaster: upgrade 0.7.13 -> 0.7.16

2024-01-19 12:21:22 +00:00

python3-asn1crypto_1.5.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-atomicwrites_1.4.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-attrs_23.2.0.bb

python3-attrs: drop python3-ctypes from RDEPENDS

2024-08-01 06:08:09 -07:00

python3-babel_2.14.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-bcrypt_4.1.2.bb

python3-bcrypt: drop python3-six from RDEPENDS

2024-07-09 06:02:56 -07:00

python3-bcrypt-crates.inc

python3-bcrypt: Fix build break on arches without 64 bit atomics

2024-02-29 10:26:13 +00:00

python3-beartype_0.17.2.bb

python3-beartype: upgrade 0.17.0 -> 0.17.2

2024-03-01 09:28:51 +00:00

python3-booleanpy_4.0.bb

python3-booleanpy: Copy recipe from meta-python

2023-09-27 11:47:42 +01:00

python3-build_1.1.1.bb

python3-build: upgrade 1.0.3 -> 1.1.1

2024-03-07 17:25:02 +00:00

python3-calver_2022.6.26.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-certifi_2024.2.2.bb

python3-certifi: Fix CVE-2024-39689

2024-08-19 06:09:14 -07:00

python3-cffi_1.16.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-chardet_5.2.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-click_8.1.7.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-cryptography_42.0.5.bb

python3-cryptography_42.0.5.bb: delete redundant ptest packaging

2024-03-05 12:24:49 +00:00

python3-cryptography-crates.inc

python3-cryptography{-vectors}: upgrade to 42.0.5

2024-02-29 10:26:13 +00:00

python3-cryptography-vectors_42.0.5.bb

python3-cryptography{-vectors}: upgrade to 42.0.5

2024-02-29 10:26:13 +00:00

python3-cython_3.0.8.bb

python3-cython: upgrade 3.0.7 -> 3.0.8

2024-01-19 12:21:23 +00:00

python3-dbus_1.3.2.bb

…

python3-dbusmock_0.31.1.bb

python3-dbusmock: upgrade 0.30.2 -> 0.31.1

2024-03-01 09:28:51 +00:00

python3-docutils_0.20.1.bb

python3-docutils: Rename utilities to their canonical names

2023-10-04 23:55:12 +01:00

python3-dtc_1.7.0.bb

python3-dtc: upgrade 1.6.1 -> 1.7.0

2023-08-24 16:50:24 +01:00

python3-dtschema_2024.2.bb

python3-dtschema: upgrade 2023.7 -> 2024.2

2024-03-07 17:25:02 +00:00

python3-editables_0.5.bb

python3-editables: upgrade 0.4 -> 0.5

2023-08-14 12:51:21 +01:00

python3-extras_1.0.0.bb

…

python3-flit-core_3.9.0.bb

…

python3-git_3.1.42.bb

python3-git: upgrade 3.1.41 -> 3.1.42

2024-02-29 10:26:13 +00:00

python3-gitdb_4.0.11.bb

python3-gitdb: upgrade 4.0.10 -> 4.0.11

2023-11-05 11:28:42 +00:00

python3-hatch-fancy-pypi-readme_24.1.0.bb

python3-hatch-fancy-pypi-readme: upgrade 23.1.0 -> 24.1.0

2024-01-07 12:24:57 +00:00

python3-hatch-vcs_0.4.0.bb

python3-hatch-vcs: upgrade 0.3.0 -> 0.4.0

2023-11-20 15:30:52 +00:00

python3-hatchling_1.21.1.bb

python3-hatchling: upgrade 1.21.0 -> 1.21.1

2024-02-14 13:53:35 +00:00

python3-hypothesis_6.98.15.bb

python3-hypothesis: upgrade 6.98.12 -> 6.98.15

2024-03-05 12:24:49 +00:00

python3-idna_3.7.bb

python3-idna: upgrade 3.6 -> 3.7

2024-08-01 06:08:09 -07:00

python3-imagesize_1.4.1.bb

…

python3-importlib-metadata_7.0.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-iniconfig_2.0.0.bb

…

python3-iniparse_0.5.bb

…

python3-installer_0.7.0.bb

…

python3-iso8601_2.1.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-isodate_0.6.1.bb

python3-isodate: add homepage

2023-09-27 11:47:42 +01:00

python3-jinja2_3.1.4.bb

python3-jinja2: Upgrade 3.1.3 -> 3.1.4

2024-07-09 06:02:55 -07:00

python3-jsonpointer_2.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-jsonschema_4.21.1.bb

python3-jsonschema: upgrade 4.17.3 -> 4.21.1 and add new dependencies

2024-03-07 17:25:02 +00:00

python3-jsonschema-specifications_2023.12.1.bb

python3-jsonschema-specifications: drop ${PYTHON_PN}

2024-04-13 14:39:07 +01:00

python3-libarchive-c_5.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-license-expression_30.2.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-lxml_5.0.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-magic_0.4.27.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-mako_1.3.2.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-markdown_3.5.2.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-markupsafe_2.1.5.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-maturin_1.4.0.bb

python3-maturin: Recognise riscv32 architecture

2024-02-29 10:26:13 +00:00

python3-maturin-crates.inc

python3-maturin: add v1.4.0

2023-12-17 19:07:21 +00:00

python3-meson-python_0.15.0.bb

python3-meson-python: move from meta-python

2024-02-20 11:39:45 +00:00

python3-more-itertools_10.2.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-ndg-httpsclient_0.5.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-numpy_1.26.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-packaging_23.2.bb

python3-packaging: upgrade 23.1 -> 23.2

2023-10-19 13:38:57 +01:00

python3-pathlib2_2.3.7.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pathspec_0.12.1.bb

python3-pathspec: upgrade 0.11.2 -> 0.12.1

2023-12-23 08:46:00 +00:00

python3-pbr_6.0.0.bb

python3-pbr: upgrade 5.11.1 -> 6.0.0

2023-11-20 15:30:52 +00:00

python3-pip_24.0.bb

python3-pip: upgrade 23.3.2 -> 24.0

2024-03-01 09:28:51 +00:00

python3-pluggy_1.4.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-ply_3.11.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-poetry-core_1.9.0.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-pretend_1.0.9.bb

…

python3-psutil_5.9.8.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-py_1.11.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pyasn1_0.5.1.bb

python3-pyasn1: upgrade 0.5.0 -> 0.5.1

2023-11-30 08:43:03 +00:00

python3-pycairo_1.26.0.bb

python3-pycairo: upgrade 1.25.1 -> 1.26.0

2024-03-01 09:28:52 +00:00

python3-pycparser_2.21.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pycryptodome_3.20.0.bb

python3-pycryptodome(x): use python_setuptools_build_meta build class

2024-08-19 06:09:14 -07:00

python3-pycryptodomex_3.20.0.bb

python3-pycryptodome(x): use python_setuptools_build_meta build class

2024-08-19 06:09:14 -07:00

python3-pyelftools_0.30.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pygments_2.17.2.bb

python3-pygments: upgrade 2.16.1 -> 2.17.2

2023-12-06 22:55:49 +00:00

python3-pygobject_3.46.0.bb

gnomebase.bbclass: Use meson as default buildsystem

2023-11-13 11:38:03 +00:00

python3-pyopenssl_24.0.0.bb

python3-pyopenssl: drop python3-six from RDEPENDS

2024-07-09 06:02:56 -07:00

python3-pyparsing_3.1.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pyproject-hooks_1.0.0.bb

python3-pyproject-hooks: fix upstream version check

2023-11-30 08:43:04 +00:00

python3-pyproject-metadata_0.7.1.bb

python3-pyproject-metadata: HOMEPAGE; DESCRIPTION

2024-02-20 11:39:45 +00:00

python3-pyrsistent_0.20.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pysocks_1.7.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pytest_8.0.2.bb

python3-pytest: upgrade 8.0.0 -> 8.0.2

2024-03-01 09:28:52 +00:00

python3-pytest-runner_6.0.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pytest-subtests_0.11.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pytz_2024.1.bb

python3-pytz: upgrade 2023.4 -> 2024.1

2024-03-01 09:28:52 +00:00

python3-pyyaml_6.0.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-rdflib_7.0.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-referencing_0.33.0.bb

python3-referencing: drop ${PYTHON_PN}

2024-04-13 14:39:07 +01:00

python3-requests_2.31.0.bb

python3-requests: cleanup RDEPENDS

2024-07-09 06:02:55 -07:00

python3-rfc3339-validator_0.1.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-rfc3986-validator_0.1.1.bb

…

python3-rfc3987_1.3.8.bb

…

python3-rpds-py_0.18.0.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-rpds-py-crates.inc

python3-jsonschema: upgrade 4.17.3 -> 4.21.1 and add new dependencies

2024-03-07 17:25:02 +00:00

python3-ruamel-yaml_0.18.6.bb

python3-ruamel-yaml: upgrade 0.17.35 -> 0.18.6

2024-03-07 17:25:02 +00:00

python3-scons_4.6.0.bb

python3-scons: upgrade 4.5.2 -> 4.6.0

2023-11-30 08:43:03 +00:00

python3-semantic-version_2.10.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-setuptools_69.1.1.bb

python3-setuptools: Fix CVE-2024-6345

2024-09-09 06:08:10 -07:00

python3-setuptools-rust_1.9.0.bb

python3-setuptools-rust: upgrade 1.8.1 -> 1.9.0

2024-03-01 09:28:52 +00:00

python3-setuptools-scm_8.0.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-six_1.16.0.bb

…

python3-smartypants_2.0.0.bb

…

python3-smmap_6.0.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-snowballstemmer_2.2.0.bb

…

python3-sortedcontainers_2.4.0.bb

…

python3-spdx-tools_0.8.2.bb

python3-spdx-tools: upgrade 0.8.1 -> 0.8.2

2023-11-05 11:28:32 +00:00

python3-sphinx_7.2.6.bb

python3-sphinx: upgrade 7.2.5 -> 7.2.6

2023-09-26 10:35:27 +01:00

python3-sphinx-rtd-theme_2.0.0.bb

python3-sphinxcontrib-jquery: add a recipe and make python3-sphinx-rtd-theme depend on it

2024-03-07 17:25:02 +00:00

python3-sphinxcontrib-applehelp_1.0.8.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-devhelp_1.0.6.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-htmlhelp_2.0.5.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-jquery_4.1.bb

python3-sphinxcontrib-jquery: add a recipe and make python3-sphinx-rtd-theme depend on it

2024-03-07 17:25:02 +00:00

python3-sphinxcontrib-jsmath_1.0.1.bb

…

python3-sphinxcontrib-qthelp_1.0.7.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-serializinghtml_1.1.10.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-subunit_1.4.4.bb

python3-subunit: Add missing module dependency

2024-01-24 15:46:19 +00:00

python3-testtools_2.7.1.bb

python3-testtools: Fix build problems from incorrect build backend

2024-04-14 06:28:02 +01:00

python3-toml_0.10.2.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-tomli_2.0.1.bb

…

python3-trove-classifiers_2024.2.23.bb

python3-trove-classifiers: upgrade 2024.1.8 -> 2024.2.23

2024-03-01 09:28:52 +00:00

python3-typing-extensions_4.10.0.bb

python3-typing-extensions: upgrade 4.9.0 -> 4.10.0

2024-03-01 09:28:52 +00:00

python3-typogrify_2.0.7.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-unittest-automake-output_0.2.bb

python3-unittest-automake-output: upgrade to 0.2

2024-02-15 09:18:09 +00:00

python3-uritools_4.0.2.bb

python3-uritools: add recipe

2023-09-27 11:47:42 +01:00

python3-urllib3_2.2.1.bb

python3-urllib3: upgrade 2.1.0 -> 2.2.1

2024-03-01 09:28:52 +00:00

python3-vcversioner_2.16.0.0.bb

…

python3-wcwidth_0.2.13.bb

python3-wcwidth: upgrade 0.2.12 -> 0.2.13

2024-03-07 17:25:03 +00:00

python3-webcolors_1.13.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-websockets_12.0.bb

python3-websockets: Import from meta-python

2024-04-14 06:28:02 +01:00

python3-wheel_0.42.0.bb

python3-wheel: upgrade 0.41.3 -> 0.42.0

2023-12-02 17:18:57 +00:00

python3-xmltodict_0.13.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-yamllint_1.35.1.bb

python3-yamllint: upgrade 1.33.0 -> 1.35.1

2024-03-01 09:28:52 +00:00

python3-zipp_3.17.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-cython.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-extras.inc

…

python-pbr.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-pyasn1.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-pycryptodome.inc

…

python-six.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00