mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-04-11 20:48:21 +00:00
python3-twisted: patch CVE-2024-41810
Though nvd[1] mentions commit[2] as part of the fix for CVE-2024-41671, but
it is actually a fix[3] for CVE-2024-41810.
Rename patch files accordingly.
[1] https://nvd.nist.gov/vuln/detail/CVE-2024-41671
[2] 046a164f89
[3] https://nvd.nist.gov/vuln/detail/CVE-2024-41810
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
@@ -10,6 +10,10 @@ CVE: CVE-2024-41671
|
||||
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f42b27abc]
|
||||
|
||||
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
|
||||
|
||||
Dropped newsfragements change from the original commit.
|
||||
|
||||
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
||||
---
|
||||
src/twisted/web/http.py | 21 +++--
|
||||
src/twisted/web/test/test_http.py | 122 ++++++++++++++++++++++++++----
|
||||
@@ -5,11 +5,15 @@ Subject: [PATCH] Merge commit from fork
|
||||
|
||||
Added HTML output encoding the "URL" parameter of the "redirectTo" function
|
||||
|
||||
CVE: CVE-2024-41671
|
||||
CVE: CVE-2024-41810
|
||||
|
||||
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33]
|
||||
|
||||
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
|
||||
|
||||
Dropped newsfragements change from the original commit.
|
||||
|
||||
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
||||
---
|
||||
src/twisted/web/_template_util.py | 2 +-
|
||||
src/twisted/web/test/test_util.py | 39 ++++++++++++++++++++++++++++++-
|
||||
Reference in New Issue
Block a user