cfcbd4d6e2
To the wheel binary of Debian bullseye, there is no release
to fix this issue. So we need to delete the binary package in
base-bullseye.lst, add source package and backport the fix to Bullseye
to fulfill security obligations.
CVE-2022-40898: https://nvd.nist.gov/vuln/detail/CVE-2022-40898
Reference:
88f02bc335
https://security-tracker.debian.org/tracker/CVE-2022-40898
TestPlan:
PASS: downloader; build-pkgs
PASS: build-image
PASS: install on SX-lab
Depends-On: https://review.opendev.org/c/starlingx/root/+/948315
Closes-Bug: 2108013
Change-Id: I73ce75f22c4234542b0cda986d4ced735ddf7efc
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>