linux/poky.git/meta/recipes-devtools/python/python.inc, branch yocto-2.7.4

python: Upgrade 2.7.17 -> 2.17.18

2020-05-22T15:23:29+00:00

LICENSE checksum changed due to 2019 -> 2020 update. (From OE-Core rev: 65ab890bbdd5b104867d80b721be117a9d269aff) Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python/python3: Whitelist CVE-2019-18348

2020-01-28T11:15:01+00:00

This is not exploitable when glibc has CVE-2016-10739 fixed, which is fixed in the upstream version since warrior. (From OE-Core rev: a2507600fecdf815ad80da569c5e8ad65286b812) Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652

2020-01-28T11:15:01+00:00

One Windows-only CVE that cannot be fixed, and two CVEs where upstream agreement is that they are not vulnerabilities. (From OE-Core rev: 1b69d141b73e46cc377f8566868da44dd5b1ea42) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

python: update to 2.7.17

2020-01-16T22:38:52+00:00

Drop backports, rebase a couple of patches. This is the second last release of py 2.x; upstream support ends on 1 January 2020, there will be one final 2.x afterwards. Note that the only thing that still needs python 2.x in oe-core is u-boot; when the next u-boot update arrives, we should find out where the py3 migration is for that component before merging the update. (From OE-Core rev: 184b60eb905bb75ecc7a0c29a175e624d8555fac) (From OE-Core rev: 7009d823a0799ce7132bd77329b273a476718c8c) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal [Minor fixup for warrior context] Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: fix CVE-2018-20852

2020-01-16T22:38:52+00:00

(From OE-Core rev: 98cc3bfc6656b8648da591dcb64de8472e6c97e0) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: include CVE patches for python-native as well

2019-10-30T13:47:54+00:00

Also avoids maintaining a different set of patches for both. (From OE-Core rev: e73d5bb4a21497ed645e2a0a4b88c2eeaf65080a) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit b3b1c00cc46b33ddbf7e008267032220e1e298af) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: update to 2.7.16

2019-06-07T12:57:48+00:00

Drop backported patches License-update: copyright years (From OE-Core rev: 0fec1d486a3ef663dc4bbab76e5ec0ed646f23e4) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: fix failing ssl tests

2018-10-08T13:13:54+00:00

Backport two and pick some other in-review patches from Ubuntu to fix ssl test failures because of OpenSSL 1.1.x changes. Fixes [YOCTO #12788] (From OE-Core rev: 4f4bbb936231dd30c3745ef573993f1062937ffd) Signed-off-by: Anuj Mittal Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python: update to version 2.7.15

2018-07-05T10:39:06+00:00

Update to the latest stable version License-Update: Copyright year updated to include 2018 Remove the alignment patch that is included upstream (From OE-Core rev: 855020053906478cea164ed254c08bedce48479d) Signed-off-by: Derek Straka Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python 2.7: fix multilib patch to accept multiarch style paths

2018-05-04T12:28:04+00:00

Using 'basename' to strip the prefix fails when using multiarch style paths. (From OE-Core rev: c61c416a6504f7e8885df3c94c839d1031920a1c) Signed-off-by: Koen Kooi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie