This recipe's CVEs are tracked using supervisord:supervisor CPE by nist,
so the default python:supervisor CPE doesn't match relevant CVEs.
See CVE db query (home-assisstant vendor is not relevant):
sqlite> select * from products where PRODUCT like 'supervisor';
CVE-2017-11610|supervisord|supervisor|||3.0|<=
CVE-2017-11610|supervisord|supervisor|3.1.0|=||
CVE-2017-11610|supervisord|supervisor|3.1.1|=||
CVE-2017-11610|supervisord|supervisor|3.1.2|=||
CVE-2017-11610|supervisord|supervisor|3.1.3|=||
CVE-2017-11610|supervisord|supervisor|3.2.0|=||
CVE-2017-11610|supervisord|supervisor|3.2.1|=||
CVE-2017-11610|supervisord|supervisor|3.2.2|=||
CVE-2017-11610|supervisord|supervisor|3.2.3|=||
CVE-2017-11610|supervisord|supervisor|3.3.0|=||
CVE-2017-11610|supervisord|supervisor|3.3.1|=||
CVE-2017-11610|supervisord|supervisor|3.3.2|=||
CVE-2019-12105|supervisord|supervisor|||4.0.2|<=
CVE-2023-27482|home-assistant|supervisor|||2023.03.1|<
Set the CVE_PRODUCT explicitly to match relevant CVEs.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 77ba5f31e2)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
It's not mentioned anywhere in source code, and python 3.12
has removed it.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
-Fixed a bug where the XML-RPC method supervisor.startProcess() would return 500
Internal Server Error instead of an XML-RPC fault response if the command could
not be parsed.
-Fixed a bug on Python 2.7 where a UnicodeDecodeError may have occurred when
using the web interface.
-Removed use of urllib.parse functions splithost, splitport, and splittype
deprecated in Python 3.8.
-Removed use of asynchat and asyncore deprecated in Python 3.10.
-The return value of the XML-RPC method supervisor.getAllConfigInfo() now
includes the directory, uid, and serverurl of the program.
-If a subprocess exits with a unexpected exit code (one not listed in
exitcodes= in a [program:x] section) then the exit will now be logged at
the WARN level instead of INFO.
-supervisorctl shutdown now shows an error message if an argument is given.
-File descriptors are now closed using the faster os.closerange() instead of
calling os.close() in a loop.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Gyorgy Sarvari
Alexander Kanavin
Wang Mingyu