linux/poky.git/meta/recipes-devtools/python/python3-mako_1.1.6.bb, branch yocto-4.0.12

python3-mako: backport fix for CVE-2022-40023

2022-11-20T08:19:17+00:00

Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-40023 Reference to Upstream Patch: https://github.com/sqlalchemy/mako/commit/925760291d6efec64fda6e9dd1fd9cfbd5be068c (From OE-Core rev: 34727812b54fd52f85806f4f95702286d551b5fd) Signed-off-by: Narpat Mali Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

classes/setuptools_build_meta: rename to python_setuptools_build_meta

2022-03-20T00:02:22+00:00

Rename this class to be python-prefixed to match the other new Python build system classes. (From OE-Core rev: 25d6bf8079797906bde7c0cf63a0466c981ba5bb) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python3-mako: inherit setuptools_build_meta

2022-02-25T15:07:51+00:00

Upstream provides a pyproject.toml which declares the setuptools.build_meta backend for PEP-517 packaging. [YOCTO #14638] (From OE-Core rev: 5d591c6a498f2667f61147f30dc441856567825a) Signed-off-by: Tim Orling Signed-off-by: Richard Purdie

python3-mako: upgrade 1.1.5 -> 1.1.6

2021-11-23T10:53:15+00:00

Fixed issue where control statements on multi lines with a backslash would not parse correctly if the template itself contained CR/LF pairs as on Windows. (From OE-Core rev: 2fa42b223a9bdafd52a7feb335001ef0b5713af8) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie