Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=yoe%2Fmut 2023-07-25T19:46:19+00:00 2023-07-25T19:46:19+00:00 Trevor Gamblin tgamblin@baylibre.com 2023-07-25T19:09:43+00:00 urn:sha1:74e70284acb2eb2f2a47a1ab1aa5ee0928d46344 - Use python_flit_core instead of setuptools3 - Modify 0001-sqlparse-change-shebang-to-python3.patch to apply on 0.4.4 - Remove CVE-2023-30608.patch since it's now upstream: [tgamblin@megalith sqlparse]$ git tag --contains c457abd 0.4.4 Changelog (https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG): Release 0.4.4 (Apr 18, 2023) ---------------------------- Notable Changes * IMPORTANT: This release fixes a security vulnerability in the parser where a regular expression vulnerable to ReDOS (Regular Expression Denial of Service) was used. See the security advisory for details: https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2 The vulnerability was discovered by @erik-krogh from GitHub Security Lab (GHSL). Thanks for reporting! Bug Fixes * Revert a change from 0.4.0 that changed IN to be a comparison (issue694). The primary expectation is that IN is treated as a keyword and not as a comparison operator. That also follows the definition of reserved keywords for the major SQL syntax definitions. * Fix regular expressions for string parsing. Other * sqlparse now uses pyproject.toml instead of setup.cfg (issue685). Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-06-15T22:04:51+00:00 Joe Slater joe.slater@windriver.com 2023-06-15T18:50:22+00:00 urn:sha1:f8df47347619f5d8dc96710e3f892ae1a21b5e90 Backport from commit c457abd5f... upstream. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2020-10-17T06:11:58+00:00 Leon Anavi leon.anavi@konsulko.com 2020-10-13T11:46:52+00:00 urn:sha1:3ae56a340a8fbb3803cddf7955b15a461a62e1f9 Upgrade to release 0.4.1: - Just removed a debug print statement - Remove support for end-of-life Python 2.7 and 3.4. Python 3.5+ is now required. - Remaining strings that only consist of whitespaces are not treated as statements anymore. Code that ignored the last element from sqlparse.split() should be updated accordingly since that function now doesn't return an empty string as the last element in some cases. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2020-04-27T14:48:46+00:00 zangrc zangrc.fnst@cn.fujitsu.com 2020-04-26T07:21:59+00:00 urn:sha1:1efe4446eb4dbdb0ae5de7709b3577185c2d01cd Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2020-03-30T18:44:47+00:00 Zang Ruochen zangrc.fnst@cn.fujitsu.com 2020-03-30T05:56:14+00:00 urn:sha1:ac867f6fa6273ca3361cc6b5b07ca23ef6d25ae6 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2020-03-09T18:26:36+00:00 Changqing Li changqing.li@windriver.com 2020-03-09T06:04:28+00:00 urn:sha1:41eb6e1a61ee416714149918489af975eba3dba6 we have offcially dropped python2, so it is possible that our code run on python3 only host, so change shebang to python3 to avoid error like: python: command not found Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>