Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=whinlatter 2024-07-26T16:51:39+00:00 2024-07-26T16:51:39+00:00 Soumya Sambu soumya.sambu@windriver.com 2024-07-26T12:05:00+00:00 urn:sha1:42a9f8f311a0131595dc9e8a119bffba436c0b16 Includes fix for CVE-2024-34069 The license didn't change but the file was renamed. Changelog: ========== https://github.com/pallets/werkzeug/blob/3.0.3/CHANGES.rst https://github.com/pallets/werkzeug/blob/3.0.2/CHANGES.rst Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-05-23T15:44:44+00:00 Jan Vermaete jan.vermaete@gmail.com 2024-05-21T18:43:06+00:00 urn:sha1:7f698a94631e708c9aca2aa4b092ea36e64fba3e File "/usr/lib/python3.12/site-packages/werkzeug/routing/exceptions.py", line 3, in <module> import difflib ModuleNotFoundError: No module named 'difflib' Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-02-20T07:22:24+00:00 Tim Orling ticotimo@gmail.com 2024-02-20T04:10:24+00:00 urn:sha1:94c20e1ef4d7bd1dde1003cde25b9adb1ccc8310 python 2 is long unsupported, so we no longer need this variable. Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-02-13T03:34:15+00:00 alperak alperyasinak1@gmail.com 2024-02-12T20:59:02+00:00 urn:sha1:10add4b12b8cf1058074680f4a8d43196f8f5beb ModuleNotFoundError: No module named 'json' ModuleNotFoundError: No module named 'logging' ModuleNotFoundError: No module named 'dataclasses' ModuleNotFoundError: No module named 'zipfile' Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-02-09T17:52:17+00:00 alperak alperyasinak1@gmail.com 2024-02-09T09:00:17+00:00 urn:sha1:421c31515307f67e921059ff59d9b1ed5cebca6d Upstream provides a pyproject.toml which declares a flit_core.buildapi build backend for PEP-517 packaging instead of setuptools. Also, RDEPENDS updated according to it. Removed CLEANBROKEN because it is not necessary. Changelog: Version 3.0.1 Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407 Version 3.0.0 Remove previously deprecated code. Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("werkzeug"), instead. generate_password_hash uses scrypt by default. Add the "werkzeug.profiler" item to the WSGI environ dictionary passed to ProfilerMiddleware’s filename_format function. It contains the elapsed and time values for the profiled request. Explicitly marked the PathConverter as non path isolating. Version 2.3.8 Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407 Version 2.3.7 Use flit_core instead of setuptools as build backend. Fix parsing of multipart bodies. Adjust index of last newline in data start. Parsing ints from header values strips spacing first. Fix empty file streaming when testing. Clearer error message when URL rule does not start with slash. Accept q value can be a float without a decimal part. Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>