linux/poky.git/meta/recipes-devtools/python/python3, branch yocto-4.0.10

python3: fix CVE-2023-24329

2023-03-23T22:45:33+00:00

Backport fix from cpython 3.11 branch. (From OE-Core rev: 37defd828cc6a8267139928730d766167905d21a) Signed-off-by: Joe Slater Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: upgrade 3.10.8 -> 3.10.9

2022-12-23T23:05:50+00:00

Security and bug fixes. Drop patch for CVE-2022-42919 and CVE-2022-37454 which were merged in 3.10.9 Fixes: * CVE-2022-45061 (gh-98433) https://nvd.nist.gov/vuln/detail/CVE-2022-45061 List of changes: https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-9-final (From OE-Core rev: f98b9c71686eb5ce5115ee73155a7d0389831ef0) Signed-off-by: Florin Diaconescu Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: advance to version 3.10.8

2022-12-13T15:23:34+00:00

Fixes CVE-2022-37460. Also add patch to fix CVE-2022-37454. (From OE-Core rev: b446dd69b79783ea232514e1c5212595ec28e553) Signed-off-by: Joe Slater Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: fix CVE-2022-42919 local privilege escalation via the multiprocessing forkserver start method

2022-12-01T19:35:04+00:00

Upstream-Status: Backport from https://github.com/python/cpython/commit/eae692eed18892309bcc25a2c0f8980038305ea2 (From OE-Core rev: 9ed7184930707c98afabca8c6b712df874ad659f) Signed-off-by: Vivek Kumbhar Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

get_module_deps3.py: Check attribute 'file'

2022-11-24T15:30:01+00:00

Check if the module object has attribute '__file__' to fix and avoid errors like: AttributeError: module '_abc' has no attribute '__file__'. Did you mean: '__name__'? (From OE-Core rev: 1684457df9fb7029a276df4438c8fc4a17e3e1e9) Signed-off-by: Leon Anavi Signed-off-by: Alexandre Belloni (cherry picked from commit 8acce12c1a4cf37ac312c92d62a6ae93a349dddf) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: upgrade 3.10.4 -> 3.10.7

2022-10-20T14:36:02+00:00

Security and bug fixes. Drop patch for gh-92036 which was merged in 3.10.5 Refresh 0017-setup.py-do-not-report-missing-dependencies-for-disa.pathc Fixes: * CVE-2020-10735 https://nvd.nist.gov/vuln/detail/CVE-2020-10735 * CVE-2021-28861 https://nvd.nist.gov/vuln/detail/CVE-2021-28861 * CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 For a list of changes see: https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-7-final https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final (From OE-Core rev: 3efae85283b19fa1b30af7fed7fa89d7a50337db) Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Backport patch to fix an issue in subinterpreters

2022-07-25T14:11:46+00:00

This adds a backport patch that fixes a problem in subinterpreters related to the garbagecollector. Without the patch, there are random segfaults in several Kodi addons that use python3-sqlite3. Presumably there are real world issues in other programs as well. (From OE-Core rev: 39d57ef7e341a048b94bc5dd9c29d58f57e06f19) Signed-off-by: Markus Volk Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python: Avoid shebang overflow on python-config.py

2022-06-24T22:57:42+00:00

The native path may be too big, leading to shebang overflow. Just use the #!/usr/bin/env python3. (From OE-Core rev: 8a86bd88f0b46b0f413b98df20891cb9aa84c271) Signed-off-by: Paulo Neves Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 84783dee09e48cb930c7cd27944eaf3f03997237) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Ensure stale empty python module directories don't break the build

2022-06-24T22:57:42+00:00

There are two issues inside importlib. Firstly, the modules are accessed in on disk order. This means behaviour seen on one system might not reproduce on another and is a real headache. Secondly, empty directories left behind by previous modules might be looked at. This has caused a long string of different issues for us. As a result, patch this to a behaviour which works for us. Upstream discussion can follow later, this is breaking builds for too many people to leave unpatched. [YOCTO #14816] (From OE-Core rev: cdb6879b49d4f6dc2bea8ff064a5b1e62db34781) Signed-off-by: Richard Purdie (cherry picked from commit e5944a38db513e033c3a3e9313267055f7254be7) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: use built-in distutils for ptest, rather than setuptools' 'fork'

2022-06-24T22:57:42+00:00

The setuptools version is now used by default when setuptools is installed, but it is incompatible with some of python's own tests. (From OE-Core rev: 8e34686911269e461dc646068f7a4d7c0e5da53f) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit c0c1ee33781733d712cd983be460001cd7938014) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

linux/poky.git/meta/recipes-devtools/python/python3, branch yocto-4.0.10

python3: fix CVE-2023-24329

python3: upgrade 3.10.8 -> 3.10.9

python3: advance to version 3.10.8

python3: fix CVE-2022-42919 local privilege escalation via the multiprocessing forkserver start method

get_module_deps3.py: Check attribute '__file__'

python3: upgrade 3.10.4 -> 3.10.7

python3: Backport patch to fix an issue in subinterpreters

python: Avoid shebang overflow on python-config.py

python3: Ensure stale empty python module directories don't break the build

python3: use built-in distutils for ptest, rather than setuptools' 'fork'

get_module_deps3.py: Check attribute 'file'