generic-poky/meta
yanjun.zhu 96d0ef130d Python: Fix for CVE-2012-2135
Reference:http://bugs.python.org/issue14579

The utf-16 decoder in Python 3.1 through 3.3 does not update the
aligned_end variable after calling the unicode_decode_call_errorhandler
function, which allows remote attackers to obtain sensitive information
(process memory) or cause a denial of service (memory corruption and crash)
via unspecified vectors.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2135

[YOCTO #3450]

(From OE-Core rev: f60d3efe93323b7056a9400a483e625a3fed4491)

Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-03-04 09:58:17 +00:00
..
classes sanity.bbclass: always use oe.lsb.distro_identifier method 2013-03-02 13:00:56 +00:00
conf linux-libc-headers: update to v3.8 2013-03-02 22:45:27 +00:00
files fs-perms: remove /var/cache from volatiles 2013-02-06 09:37:29 +00:00
lib/oe distro_check: Remove creation of empty Meego filelist. 2013-02-12 13:22:44 +00:00
recipes-bsp v86d: compile against userspace safe kernel headers 2013-03-01 13:03:28 +00:00
recipes-connectivity Add scratch directory for NFS upcall state storage 2013-03-02 12:56:55 +00:00
recipes-core eglibc: move RPROVIDES to eglibc-package 2013-03-02 22:45:26 +00:00
recipes-devtools Python: Fix for CVE-2012-2135 2013-03-04 09:58:17 +00:00
recipes-extended chkconfig-alternatives-native: just append to PROVIDES 2013-03-02 22:45:26 +00:00
recipes-gnome gconf: update to 3.2.6 2013-02-28 23:15:52 +00:00
recipes-graphics weston: recommend some reasonable fonts so the terminal works 2013-03-03 12:01:09 +00:00
recipes-kernel linux-yocto: remove 3.0 linux-yocto recipes 2013-03-02 22:45:28 +00:00
recipes-lsb4/perl libdumpvalue-perl: Update to 1.17 2012-11-21 16:55:57 +00:00
recipes-multimedia pulseaudio: add config option to ensure valgrind is excluded 2013-03-02 12:56:53 +00:00
recipes-qt qt4-embedded: Enable Linux Input support 2013-02-28 23:15:50 +00:00
recipes-rt rt-tests: fix cyclictest reported 1 sec latencies 2013-02-08 14:50:37 +00:00
recipes-sato matchbox-session-sato: do not rdepend on initscripts 2013-03-01 13:03:29 +00:00
recipes-support libassuan: upgrade to 2.1.0 2013-02-28 23:15:52 +00:00
site site/x32-linux: Specify double alignment 2013-02-13 16:52:30 +00:00
COPYING.MIT
recipes.txt recipes.txt: Add entries for "recipes-rt" and "recipes-support" 2012-07-09 16:58:56 +01:00