mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-11-14 03:57:15 +00:00
python3-cmd2: Upgrade 4.4.1 -> 4.4.2
Upgrade to release 4.4.2 with security fixes: - Fixed shell command injection through file names in the edit command and Cmd.run_editor(). A file name containing shell syntax such as $(...) or backticks was interpreted by the shell instead of being passed to the editor as-is. On Windows, run_editor() now raises ValueError for an editor or file path containing a double quote, which cannot be passed safely to cmd.exe. - The persistent history file is now readable and writable only by its owner (mode 0600 on POSIX), since history can contain secrets typed as command arguments. The permissions of an existing history file are tightened the next time history is saved. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
1 parent
dbacd7aaae
commit
166a07306b
1 file changed
+1
-1
+1
-1
@@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=f2a861642858e0858af9dd4e4716bae0"
|
||||
|
||||
DEPENDS += "python3-setuptools-scm-native"
|
||||
|
||||
SRC_URI[sha256sum] = "e8ef3f9bf2fb8f72acddaf934b97c49d14c6ae2be7271c547b97593abdea6c1e"
|
||||
SRC_URI[sha256sum] = "677696e293a1a6a310425d3d52e470518078918585d650fa7eff10635ef4256a"
|
||||
|
||||
inherit pypi python_setuptools_build_meta python3native
|
||||
|
||||
Reference in new issue
Block a user