From 74e70284acb2eb2f2a47a1ab1aa5ee0928d46344 Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Tue, 25 Jul 2023 15:09:43 -0400 Subject: python3-sqlparse: upgrade 0.4.3 -> 0.4.4 - Use python_flit_core instead of setuptools3 - Modify 0001-sqlparse-change-shebang-to-python3.patch to apply on 0.4.4 - Remove CVE-2023-30608.patch since it's now upstream: [tgamblin@megalith sqlparse]$ git tag --contains c457abd 0.4.4 Changelog (https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG): Release 0.4.4 (Apr 18, 2023) ---------------------------- Notable Changes * IMPORTANT: This release fixes a security vulnerability in the parser where a regular expression vulnerable to ReDOS (Regular Expression Denial of Service) was used. See the security advisory for details: https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2 The vulnerability was discovered by @erik-krogh from GitHub Security Lab (GHSL). Thanks for reporting! Bug Fixes * Revert a change from 0.4.0 that changed IN to be a comparison (issue694). The primary expectation is that IN is treated as a keyword and not as a comparison operator. That also follows the definition of reserved keywords for the major SQL syntax definitions. * Fix regular expressions for string parsing. Other * sqlparse now uses pyproject.toml instead of setup.cfg (issue685). Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj --- .../python/python3-sqlparse_0.4.3.bb | 29 ---------------------- 1 file changed, 29 deletions(-) delete mode 100644 meta-python/recipes-devtools/python/python3-sqlparse_0.4.3.bb (limited to 'meta-python/recipes-devtools/python/python3-sqlparse_0.4.3.bb') diff --git a/meta-python/recipes-devtools/python/python3-sqlparse_0.4.3.bb b/meta-python/recipes-devtools/python/python3-sqlparse_0.4.3.bb deleted file mode 100644 index a402f991f7..0000000000 --- a/meta-python/recipes-devtools/python/python3-sqlparse_0.4.3.bb +++ /dev/null @@ -1,29 +0,0 @@ -DESCRIPTION = "Non-validating SQL parser module" -HOMEPAGE = "http://pypi.python.org/pypi/sqlparse" -SECTION = "devel/python" -LICENSE = "BSD-3-Clause" -LIC_FILES_CHKSUM = "file://LICENSE;md5=2b136f573f5386001ea3b7b9016222fc" - -SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \ - file://CVE-2023-30608.patch \ - file://run-ptest \ - " - -SRC_URI[sha256sum] = "69ca804846bb114d2ec380e4360a8a340db83f0ccf3afceeb1404df028f57268" - -export BUILD_SYS -export HOST_SYS - -inherit pypi ptest setuptools3 - -RDEPENDS:${PN}-ptest += " \ - ${PYTHON_PN}-pytest \ - ${PYTHON_PN}-unixadmin \ -" - -do_install_ptest() { - install -d ${D}${PTEST_PATH}/tests - cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/ -} - -BBCLASSEXTEND = "native nativesdk" -- cgit v1.2.3-54-g00ecf