linux/poky.git/meta/recipes-devtools/python/python3, branch styhead-5.1.4

python3: upgrade 3.12.8 -> 3.12.9

2025-02-14T15:49:09+00:00

Release notes: https://docs.python.org/release/3.12.9/whatsnew/changelog.html#python-3-12-9 Solves CVE-2025-0938, CVE-2024-12254 and 3 other vulnerabilities without CVE number assigment. Add a patch to fix failure of a new test. (From OE-Core rev: cb0187ed2962e4c140c4f59ce08f94b18b05004c) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

python3: upgrade 3.12.7 -> 3.12.8

2025-01-09T14:02:48+00:00

Changelog: https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8 (From OE-Core rev: 751cf7a576dbb949763703e655e951bcd583f251) Signed-off-by: Guðni Már Gilbert Signed-off-by: Steve Sakoman

python3: upgrade 3.12.6 -> 3.12.7

2025-01-09T14:02:48+00:00

Changelog: https://docs.python.org/release/3.12.7/whatsnew/changelog.html#python-3-12-7 (From OE-Core rev: 103cb3a5390214bd95a75c4db4b00f64b456b7f1) Signed-off-by: Guðni Már Gilbert Signed-off-by: Steve Sakoman

python3: Upgrade 3.12.5 -> 3.12.6

2024-09-13T06:15:49+00:00

Includes security fixes for CVE-2024-7592, CVE-2024-8088, CVE-2024-6232 and other bug fixes. Removed below patches, as the fix is included in 3.12.6 upgrade: 1. CVE-2024-7592.patch Release Notes: https://www.python.org/downloads/release/python-3126/ (From OE-Core rev: aa492b1fd5973c37b8fa2cd17d28199eba46afcc) Signed-off-by: Divya Chellam Signed-off-by: Richard Purdie

python: Backport fixes for CVE-2024-7592

2024-09-01T11:28:10+00:00

(From OE-Core rev: 340867efbbf517393c12466d0490f96ef7c45642) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3: skip readline limited history tests

2024-08-15T13:56:05+00:00

Python 3.12.5 is failing a newer ptest for reading/writing limited history when editline (default) is set in PACKAGECONFIG. Skip it for now until a proper fix (if any) is determined. A bug has been opened upstream: https://github.com/python/cpython/issues/123018 (From OE-Core rev: de569ddffd5ea36b70c56df21dec9c892e5dee7d) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

python3: add dependency on -compression to -core

2024-07-24T21:51:39+00:00

importlib.metadata is part of -core, but that will import zipfile which is part of -compression. Obviously this shows that our packaging of the Python modules is not optimal. I plan to follow up with a redesign of the splitting which focuses on simply pulling out the larger or esoteric modules and having a more featureful core. (From OE-Core rev: 0f8d985b290def1fbb356aede152a10424c9d2f1) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

Revert "python3: drop deterministic_imports.patch"

2024-07-23T11:45:22+00:00

There are still issues with importlib.metadata and empty directories, which surface when doing builds with existing build trees. I've raised this on the upstream ticket that Alex Kanavin has already filed[1] so hopefully we can have a resolution soon. This reverts commit 058c3a6e2b30103202f3995930825fc2f366274f. [1] https://github.com/python/importlib_metadata/issues/489 (From OE-Core rev: 020c9438fa4d90824dcf7068ccf3722b3b7b8ccf) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python3: drop deterministic_imports.patch

2024-07-01T12:56:03+00:00

https://github.com/python/importlib_metadata/issues/489 Upstream discussion revealed that: - the issue was happening due to a bug in setuptools - the bug was fixed in setuptools 63 (I confirmed this: empty dist-info directories no longer seem to trigger any issues if the patch is dropped) - the patch would obscure any further issues of this kind instead of exposing them for easy fixing, so they suggest we drop it and report if anything else pops up (From OE-Core rev: 1a4f25abf29b47949782641c68cc7d3e4136988a) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

python3: submit deterministic_imports.patch upstream as a ticket

2024-06-24T11:43:40+00:00

(From OE-Core rev: d77511cc9add70857e4a9d7237b23d7d6ae14e98) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie