<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/python/files, branch dunfell-next</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=dunfell-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=dunfell-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2020-05-07T12:03:30+00:00</updated>
<entry>
<title>python3: fix CVE-2020-8492</title>
<updated>2020-05-07T12:03:30+00:00</updated>
<author>
<name>Trevor Gamblin</name>
<email>trevor.gamblin@windriver.com</email>
</author>
<published>2020-04-23T14:04:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5811ed9140fab64da59d0d2ad6e6b0fec8341a20'/>
<id>urn:sha1:5811ed9140fab64da59d0d2ad6e6b0fec8341a20</id>
<content type='text'>
CVE: CVE-2020-8492

(From OE-Core rev: c9ee462bb606b34ab31cfb90f84a5302d15135cf)

Signed-off-by: Trevor Gamblin &lt;trevor.gamblin@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3-setuptools: upgrade 45.0.0 -&gt; 45.2.0</title>
<updated>2020-02-28T23:11:28+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2020-02-25T18:53:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=61160dacc697037f57d987f4d56bbbd16097f9b9'/>
<id>urn:sha1:61160dacc697037f57d987f4d56bbbd16097f9b9</id>
<content type='text'>
(From OE-Core rev: 9c256927141deadebb0cf3e6c83e6a76b9f0c4b0)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3-setuptools: upgrade 42.0.2 -&gt; 45.0.0</title>
<updated>2020-02-03T13:03:32+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2020-01-29T09:07:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=79cc1e2c25d1c5ff3e88e6b8b5674f453f928241'/>
<id>urn:sha1:79cc1e2c25d1c5ff3e88e6b8b5674f453f928241</id>
<content type='text'>
(From OE-Core rev: ed1d8e2db0d3b5c60ce83ccebb7f0f7ac36f243a)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3-setuptools: upgrade 40.0.0 -&gt; 40.8.0</title>
<updated>2019-02-20T21:22:49+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2019-02-17T19:48:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=806de34fda21fb1ab38d6b00566eb3d538d574d0'/>
<id>urn:sha1:806de34fda21fb1ab38d6b00566eb3d538d574d0</id>
<content type='text'>
(From OE-Core rev: dceac54e05bb786e19de8db33982a8d54e41a915)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>distutils/setuptools-native, distutils3/setuptools3-native: do not try to fetch code during do_compile</title>
<updated>2018-07-26T12:16:40+00:00</updated>
<author>
<name>Hongxu Jia</name>
<email>hongxu.jia@windriver.com</email>
</author>
<published>2018-07-17T13:36:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8fdbb0381dc7d9beee30c38e41e140b0a7c2838b'/>
<id>urn:sha1:8fdbb0381dc7d9beee30c38e41e140b0a7c2838b</id>
<content type='text'>
If a python recipe is using setuptools and the setup_requires argument, where
setuptools will use easy_install to fetch the module if it isn't
present.

The build failed on a machine where a proxy was required, but succeeded on a
machine which had direct access to the internet

Add var-NO_FETCH_BUILD, and set it in distutils_do_compile which does not
allow to fetch code from internet during do_compile.

Example result:
...
ERROR: Do not try to fetch `pytest-runner1' for building. Please add its native recipe to DEPENDS.
Traceback (most recent call last):
  File "setup.py", line 56, in &lt;module&gt;
...

The improvement is flexible for test_requirements argument (used at
`setup.py test'), where use easy_install also.

[YOCTO #12084]
(From OE-Core rev: 57414f4a1c549e6faaa110e6e95ff601b05b7361)

Signed-off-by: Hongxu Jia &lt;hongxu.jia@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
