starlingx/integ
Code Issues Proposed changes

Debian: setuptools: fix CVE-2022-40897/CVE-2024-6345

Browse Source 
Upgrade setuptools to 52.0.0-4+deb11u1

Refer to:
https://nvd.nist.gov/vuln/detail/CVE-2022-40897
https://nvd.nist.gov/vuln/detail/CVE-2024-6345

Test Plan:
Pass: downloader
Pass: build-pkgs --clean --all
Pass: build-image
Pass: boot

Closes-bug: #2079771

Change-Id: I9ad07b3a4af23c77791bba6c6f03ce187eba4443
Signed-off-by: Wentao Zhang <wentao.zhang@windriver.com>
This commit is contained in:
STX Builder 2024-09-06 08:58:48 +00:00 committed by Wentao Zhang
parent 528cb3d7fa
commit 6d9bab7165
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
python/python3-setuptools/debian/meta_data.yaml
View File

@ -1,7 +1,7 @@
---
debname: setuptools
debver: 52.0.0-4
archive: https://snapshot.debian.org/archive/debian/20210629T151153Z/pool/main/s/setuptools/
debver: 52.0.0-4+deb11u1
archive: https://snapshot.debian.org/archive/debian-security/20240904T224638Z/pool/updates/main/s/setuptools/
revision:
dist: $STX_DIST
PKG_GITREVCOUNT: true