pool/python38
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Add CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch removing

Browse Source 
support for anything but OpenSSL 1.1.1 or newer (bsc#1227233,
  CVE-2024-5642).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python38?expand=0&rev=164
This commit is contained in:
Matej Cepl 2024-08-08 20:05:24 +00:00 committed by Git OBS Bridge
parent 91f49896e0
commit 88ff22d131
3 changed files with 1749 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1742
CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch Normal file
View File

File diff suppressed because it is too large Load Diff

3
python38.changes
View File

@ -7,6 +7,9 @@ Thu Aug 8 19:30:36 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
- Add CVE-2024-6923-email-hdr-inject.patch to prevent email - Add CVE-2024-6923-email-hdr-inject.patch to prevent email
header injection due to unquoted newlines (bsc#1228780, header injection due to unquoted newlines (bsc#1228780,
CVE-2024-6923). CVE-2024-6923).
- Add CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch removing
support for anything but OpenSSL 1.1.1 or newer (bsc#1227233,
CVE-2024-5642).
- %{profileopt} variable is set according to the variable - %{profileopt} variable is set according to the variable
%{do_profiling} (bsc#1227999) %{do_profiling} (bsc#1227999)

4
python38.spec
View File

@ -204,6 +204,9 @@ Patch46: bso1227999-reproducible-builds.patch
# PATCH-FIX-UPSTREAM CVE-2024-6923-email-hdr-inject.patch bsc#1228780 mcepl@suse.com # PATCH-FIX-UPSTREAM CVE-2024-6923-email-hdr-inject.patch bsc#1228780 mcepl@suse.com
# prevent email header injection, patch from gh#python/cpython!122608 # prevent email header injection, patch from gh#python/cpython!122608
Patch47: CVE-2024-6923-email-hdr-inject.patch Patch47: CVE-2024-6923-email-hdr-inject.patch
# PATCH-FIX-UPSTREAM CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch bsc#1227233 mcepl@suse.com
# Remove for support for anything but OpenSSL 1.1.1 or newer
Patch48: CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch
BuildRequires: autoconf-archive BuildRequires: autoconf-archive
BuildRequires: automake BuildRequires: automake
BuildRequires: fdupes BuildRequires: fdupes
@ -480,6 +483,7 @@ other applications.
%patch -p1 -P 45 %patch -p1 -P 45
%patch -p1 -P 46 %patch -p1 -P 46
%patch -p1 -P 47 %patch -p1 -P 47
%patch -p1 -P 48
# drop Autoconf version requirement # drop Autoconf version requirement
sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac