[OE-core] [PATCH 1/2] python: fix security vulnerability

2011-07-21 Thread nitin . a . kamble
From: Nitin A Kamble This Fixes bug: [Yocto #1254] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1015 Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are now collapsed within the url properly before looking in cgi_directories. Signed-off-by: Nitin A Kamble

Re: [OE-core] [PATCH 1/2] python: fix security vulnerability

2011-07-21 Thread Kamble, Nitin A
> devtools/python/python/security_issue_2254_fix.patch > > @@ -0,0 +1,184 @@ > > +UpstreamStatus: Backport > > This should be Upstream-Status I guess to match other patches that > said there are few more anomalies > > meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel- > 2.6.patch

Re: [OE-core] [PATCH 1/2] python: fix security vulnerability

2011-07-21 Thread Khem Raj
On Thu, Jul 21, 2011 at 2:29 AM, wrote: > From: Nitin A Kamble > > This Fixes bug: [Yocto #1254] > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1015 > > Issue #2254: Fix CGIHTTPServer information disclosure.  Relative paths are >  now collapsed within the url properly before lookin

[OE-core] [PATCH 1/2] python: fix security vulnerability

2011-07-21 Thread nitin . a . kamble
From: Nitin A Kamble This Fixes bug: [Yocto #1254] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1015 Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are now collapsed within the url properly before looking in cgi_directories. Signed-off-by: Nitin A Kamble