meta-openembedded/meta-python
Narpat Mali ab9a31fabc python3-django: fix CVE-2023-41164
In Django 3.2 before 3.2.21, 4 before 4.1.11, and 4.2 before 4.2.5,
``django.utils.encoding.uri_to_iri()`` was subject to potential denial
of service attack via certain inputs with a very large number of Unicode
characters.

Since, there is no ptest available for python3-django so have not
tested the patch changes at runtime.

References:
https://security-tracker.debian.org/tracker/CVE-2023-41164
https://www.djangoproject.com/weblog/2023/sep/04/security-releases/

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-09-27 10:23:14 -04:00
..
classes meta-python: Clean up recipes and classes that were moved to oe-core 2022-03-16 09:25:28 -04:00
conf layer.conf: change layer priority to match oe-core 2022-02-28 08:39:26 -08:00
licenses python3-crc32c: add 2.2.post0 2022-03-01 09:06:56 -08:00
recipes-connectivity python3-thrift: upgrade 0.15.0 -> 0.16.0 2022-04-06 14:55:16 -04:00
recipes-core meta-python-image: Fix build depends 2022-05-17 05:57:10 -07:00
recipes-devtools python3-django: fix CVE-2023-41164 2023-09-27 10:23:14 -04:00
recipes-extended python3-blivetgui: use symbolic list-add and edit- icons 2022-04-22 16:26:22 +00:00
COPYING.MIT
README meta-openemnedded: Add myself as kirkstone maintainer 2022-04-23 17:14:31 -07:00

meta-python
================================

Introduction
-------------------------

This layer is intended to be the home of python modules for OpenEmbedded.

Dependencies
-------------------------

The meta-python layer depends on:

	URI: git://git.openembedded.org/openembedded-core
	layers: meta
	branch: kirkstone

	URI: git://git.openembedded.org/meta-openembedded
	layers: meta-oe
	branch: kirkstone

Please follow the recommended setup procedures of your OE distribution.
For Angstrom that is:
        http://www.angstrom-distribution.org/building-angstrom,
other distros should have similar online resources.

Contributing
-------------------------

The meta-openembedded mailinglist
(openembedded-devel@lists.openembedded.org) is used for questions,
comments and patch review. It is subscriber only, so please register
before posting.

Send pull requests to openembedded-devel@lists.openembedded.org with
'[meta-python][kirkstone]' in the subject.

When sending single patches, please use something like:
git send-email -M -1 --to=openembedded-devel@lists.openembedded.org --subject-prefix='meta-python][kirkstone][PATCH'

Maintenance
-------------------------

Layer maintainers: Armin Kuster <akuster808@gmail.com>