- update to 2.7.8

* bugfix-only release, dozens of bugs fixed
  * fixes CVE-2014-4650 directory traversal in CGIHTTPServer
  * fixes CVE-2014-7185 (bnc#898572) potential buffer overflow in buffer()
- dropped upstreamed CVE-2014-4650-CGIHTTPserver-traversal.patch

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=167
This commit is contained in:
Jan Matejek
2014-09-30 15:34:42 +00:00
committed by Git OBS Bridge
parent 13e614b70b
commit ad45ed7669
17 changed files with 52 additions and 76 deletions

View File

@@ -16,7 +16,7 @@
#
Name: python-doc
Version: 2.7.7
Version: 2.7.8
Release: 0
Summary: Additional Package Documentation for Python
License: Python-2.0
@@ -60,8 +60,6 @@ Patch26: xmlrpc_gzip_27.patch
# CVE-2013-1752 patches missing in 2.7.6: imaplib, poplib, smtplib
Patch28: smtplib_maxline-2.7.patch
Patch29: python-2.7.6-poplib.patch
# CVE-2014-4650 - File disclosure and directory traversal in CGIHTTPServer
Patch30: CVE-2014-4650-CGIHTTPServer-traversal.patch
# remove link count optimization that breaks mhlib on btrfs (and possibly elsewhere)
Patch31: python-2.7.7-mhlib-linkcount.patch
# COMMON-PATCH-END
@@ -110,7 +108,6 @@ Python, and Macintosh Module Reference in PDF format.
%patch26 -p1
%patch28 -p1
%patch29 -p1
%patch30 -p1
%patch31 -p1
# drop Autoconf version requirement