meta-openembedded/meta-python
Soumya Sambu dadb8790bd
python3-flask-cors: Fix CVE-2024-6221
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the
`Access-Control-Allow-Private-Network` CORS header to be set to true
by default, without any configuration option. This behavior can expose
private network resources to unauthorized external access, leading to
significant security risks such as data breaches, unauthorized access
to sensitive information, and potential network intrusions.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6221

Upsteam-Patch:
7ae310c56a

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-03 07:05:13 -07:00
..
classes
conf python3-tzdata: enable ptest 2024-08-09 14:25:29 -07:00
licenses
recipes-connectivity
recipes-core
recipes-devtools python3-flask-cors: Fix CVE-2024-6221 2024-09-03 07:05:13 -07:00
recipes-extended python3-pykickstart: switch to PEP-517 build backend 2024-08-09 14:25:23 -07:00
recipes-networking/python
COPYING.MIT
README.md

meta-python

Introduction

This layer is intended to be the home of python modules for OpenEmbedded.

Dependencies

The meta-python layer depends on:

URI: git://git.openembedded.org/openembedded-core
layers: meta
branch: master

URI: git://git.openembedded.org/meta-openembedded
layers: meta-oe
branch: master

Contributing

The meta-openembedded mailinglist (openembedded-devel@lists.openembedded.org) is used for questions, comments and patch review. It is subscriber only, so please register before posting.

Send pull requests to openembedded-devel@lists.openembedded.org with '[meta-python]' in the subject.

When sending single patches, please use something like: git send-email -M -1 --to=openembedded-devel@lists.openembedded.org --subject-prefix='meta-python][PATCH'

Maintenance

Layer maintainers: Tim "moto-timo" Orling TicoTimo@gmail.com Derek Straka derek@asterius.io