meta-openembedded/meta-python
Stefan Ghinea aef354a0c2 python3-django: fix CVE-2021-28658
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,
MultiPartParser allowed directory traversal via uploaded files with
suitably crafted file names. Built-in upload handlers were not affected
by this vulnerability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-28658

Upstream patches:
4036d62bda

Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 19:09:37 -07:00
..
classes
conf layers: Drop gatesgarth from LAYERSERIES_COMPAT 2021-03-19 11:58:17 -07:00
licenses
recipes-connectivity gateone: Cleanup assets for removed recipe 2021-02-04 09:26:47 -08:00
recipes-core python3-h11: new package 2021-03-30 09:04:34 -07:00
recipes-devtools python3-django: fix CVE-2021-28658 2021-04-23 19:09:37 -07:00
recipes-extended python3-pykickstart: update to 3.32 2021-02-16 08:50:56 -08:00
COPYING.MIT
README README: updated Maintainers list for Hardknott 2021-03-31 07:05:07 -07:00

meta-python
================================

Introduction
-------------------------

This layer is intended to be the home of python modules for OpenEmbedded.

Dependencies
-------------------------

The meta-python layer depends on:

	URI: git://git.openembedded.org/openembedded-core
	layers: meta
	branch: hardknott
	revision: HEAD

	URI: git://git.openembedded.org/meta-openembedded
	layers: meta-oe
	branch: hardknott
	revision: HEAD

Please follow the recommended setup procedures of your OE distribution.
For Angstrom that is:
        http://www.angstrom-distribution.org/building-angstrom,
other distros should have similar online resources.

Contributing
-------------------------

The meta-openembedded mailinglist
(openembedded-devel@lists.openembedded.org) is used for questions,
comments and patch review. It is subscriber only, so please register
before posting.

Send pull requests to openembedded-devel@lists.openembedded.org with
'[meta-python][hardknott]' in the subject.

When sending single patches, please use something like: 
'git send-email -M -1 --to=openembedded-devel@lists.openembedded.org --subject-prefix=meta-python][hardknott][PATCH'

Maintenance
-------------------------

hardknott Maintainers: Armin Kuster <akuster808@gmail.com>