mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-04-11 08:38:28 +00:00
Code Issues Projects Releases Wiki Activity

python3-twisted: patch CVE-2024-41810

Browse Source 
Though nvd[1] mentions commit[2] as part of the fix for CVE-2024-41671, but
it is actually a fix[3] for CVE-2024-41810.

Rename patch files accordingly.

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-41671
[2] 046a164f89
[3] https://nvd.nist.gov/vuln/detail/CVE-2024-41810

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-01-25 14:24:02 +13:00
committed by Anuj Mittal
parent daacf501a1
commit cb4570120b
3 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671-0002.patch → meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671.patch
View File

@@ -10,6 +10,10 @@ CVE: CVE-2024-41671
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f42b27abc]
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Dropped newsfragements change from the original commit.
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
src/twisted/web/http.py | 21 +++--
src/twisted/web/test/test_http.py | 122 ++++++++++++++++++++++++++----

6
meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41671-0001.patch → meta-python/recipes-devtools/python/python3-twisted/CVE-2024-41810.patch
View File

@@ -5,11 +5,15 @@ Subject: [PATCH] Merge commit from fork
Added HTML output encoding the "URL" parameter of the "redirectTo" function
CVE: CVE-2024-41671
CVE: CVE-2024-41810
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33]
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Dropped newsfragements change from the original commit.
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
src/twisted/web/_template_util.py | 2 +-
src/twisted/web/test/test_util.py | 39 ++++++++++++++++++++++++++++++-

4
meta-python/recipes-devtools/python/python3-twisted_24.3.0.bb
View File

@@ -7,8 +7,8 @@ LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=c1c5d2c2493b848f83864bdedd67bbf5"
SRC_URI += " \
file://CVE-2024-41671-0001.patch \
file://CVE-2024-41671-0002.patch \
file://CVE-2024-41671.patch \
file://CVE-2024-41810.patch \
"
SRC_URI[sha256sum] = "6b38b6ece7296b5e122c9eb17da2eeab3d98a198f50ca9efd00fb03e5b4fd4ae"