Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=kirkstone-4.0.18 2023-01-26T23:37:05+00:00 2023-01-26T23:37:05+00:00 Narpat Mali narpat.mali@windriver.com 2023-01-12T14:55:32+00:00 urn:sha1:fd36d262b86192bbc547f9a1e7aada5e94dccb8d An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. CVE: CVE-2022-40898 Upstream-Status: Backport [https://github.com/pypa/wheel/commit/88f02bc335d5404991e532e7f3b0fc80437bf4e0] (From OE-Core rev: 0974291e545aec68755dfb634c75dca37cca1ea9) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2022-02-25T15:07:50+00:00 Tim Orling ticotimo@gmail.com 2022-02-22T19:16:30+00:00 urn:sha1:f4c43d7921e51b6d0700d4cc7e257b9932bd4e30 Backport pyproject.toml from flit-backend branch. Inherit flit_core class to build Inherit pip_install_wheel to install wheels for target We need to bootstrap python3-wheel-native in order to have bdist_wheel available to python3-setuptools-native and the refactored setuptools3.bbclass. Simply unzip the wheel into PYTHON_SITEPACKAGES_DIR for class-native. [YOCTO #14638] (From OE-Core rev: 764d0c2e079b3511afe03deadf3ec922e41b89aa) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>