pool/python
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity

- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing

Browse Source 
bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=292
This commit is contained in:
Matej Cepl
2021-01-31 18:01:03 +00:00
committed by Git OBS Bridge
parent a349f4646b
commit c021ec3bc1
7 changed files with 206 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python-base.spec
View File

@@ -97,6 +97,9 @@ Patch59: CVE-2019-9674-zip-bomb.patch
# PATCH-FIX-UPSTREAM configure_PYTHON_FOR_REGEN.patch bsc#1078326 mcepl@suse.com
# PYTHON_FOR_REGEN value is set very weird upstream
Patch60: configure_PYTHON_FOR_REGEN.patch
# PATCH-FIX-SLE CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch bsc#1181126 mcepl@suse.com
# buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution
Patch61: CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch
# COMMON-PATCH-END
%define python_version %(echo %{tarversion} | head -c 3)
BuildRequires: automake
@@ -222,6 +225,7 @@ other applications.
%patch58 -p1
%patch59 -p1
%patch60 -p1
%patch61 -p1
# drop Autoconf version requirement
sed -i 's/^version_required/dnl version_required/' configure.ac