python-requests: fix CVE-2018-18074

Backport two patches to fix the following CVE.

CVE: CVE-2018-18074

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Qi.Chen@windriver.com
2018-10-17 10:32:11 +08:00
committed by Khem Raj
parent df9f15caaa
commit 107eefed37
3 changed files with 186 additions and 0 deletions
@@ -3,6 +3,12 @@ HOMEPAGE = "http://python-requests.org"
LICENSE = "Apache-2.0"
LIC_FILES_CHKSUM = "file://LICENSE;md5=bfbeafb85a2cee261510d65d5ec19156"
FILESEXTRAPATHS_prepend := "${THISDIR}/python-requests:"
SRC_URI += "file://0001-Strip-Authorization-header-whenever-root-URL-changes.patch \
file://0002-Rework-authorization-stripping-logic-as-discussed.patch \
"
SRC_URI[md5sum] = "6c1a31afec9d614e2e71a91ee6ca2878"
SRC_URI[sha256sum] = "ec22d826a36ed72a7358ff3fe56cbd4ba69dd7a6718ffd450ff0e9df7a47ce6a"