From: Tim Orling <[email protected]>
Released: Thu Sep 22 2022
* bug
- [bug] [lexer]
* Fixed issue in lexer in the same category as that of #366 where the regexp
used to match an end tag didn’t correctly organize for matching characters
surrounded by whitespace, leading to high memory / interpreter hang if a
closing tag incorrectly had a large amount of unterminated space in it.
Credit to Sebastian Chnelik for locating the issue.
As Mako templates inherently render and directly invoke arbitrary Python
code from the template source, it is never appropriate to create templates
that contain untrusted input.
References: #367
[1] https://docs.makotemplates.org/en/latest/changelog.html#change-1.2.3
[2] https://github.com/sqlalchemy/mako/issues/366
[3] https://github.com/sqlalchemy/mako/issues/367
Signed-off-by: Tim Orling <[email protected]>
Signed-off-by: Richard Purdie <[email protected]>
(cherry picked from commit 49ad6f031458e1f48f24547dc88e41abc4ec41a6)
Signed-off-by: Steve Sakoman <[email protected]>
---
.../python/{python3-mako_1.2.2.bb => python3-mako_1.2.3.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/python/{python3-mako_1.2.2.bb =>
python3-mako_1.2.3.bb} (85%)
diff --git a/meta/recipes-devtools/python/python3-mako_1.2.2.bb
b/meta/recipes-devtools/python/python3-mako_1.2.3.bb
similarity index 85%
rename from meta/recipes-devtools/python/python3-mako_1.2.2.bb
rename to meta/recipes-devtools/python/python3-mako_1.2.3.bb
index e3774ee621..12acfee777 100644
--- a/meta/recipes-devtools/python/python3-mako_1.2.2.bb
+++ b/meta/recipes-devtools/python/python3-mako_1.2.3.bb
@@ -8,7 +8,7 @@ PYPI_PACKAGE = "Mako"
inherit pypi python_setuptools_build_meta
-SRC_URI[sha256sum] =
"3724869b363ba630a272a5f89f68c070352137b8fd1757650017b7e06fda163f"
+SRC_URI[sha256sum] =
"7fde96466fcfeedb0eed94f187f20b23d85e4cb41444be0e542e2c8c65c396cd"
RDEPENDS:${PN} = "${PYTHON_PN}-html \
${PYTHON_PN}-markupsafe \
--
2.25.1
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#173545):
https://lists.openembedded.org/g/openembedded-core/message/173545
Mute This Topic: https://lists.openembedded.org/mt/95141361/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
