compile/centos_srpms_centos.lst at a67c9664663911f21bdd2bdefe356912293b5c57 - compile - OpenDev: Free Software Needs Free Tools

starlingx/compile

Joe Slater 110035d8fc python: Fix CVE-2021-3177

A buffer overflow can occur when calling c_double.from_param().

Advance to python-2.7.5-92.el7_9.src.rpm.  Fixes CVE-2019-20907,
CVE-2020-26116, and CVE-2022-0391 as well.

=== Testing
Build and boot iso; log in.

$ python
>>> from ctypes import c_double
>>> c_double.from_param(1e300)

The last line will cause python to abort if the fix
has not been applied.

Ran ansible to provision system.  Unlocked.  Rebooted to unlocked
and enabled host-list status.
===

Closes-bug: 1987927
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Change-Id: Idbc681581b48e05ebacdfe873d95d0a342a232ea

2022-09-02 00:48:30 +00:00

4 lines

86 B

Plaintext

Raw Blame History

	`bash-4.2.46-34.el7.src.rpm`
	`expat-2.1.0-14.el7_9.src.rpm`
	`python-2.7.5-92.el7_9.src.rpm`