linux/poky.git/meta/recipes-devtools/python/python3, branch yocto-4.0.8

python3: upgrade 3.10.8 -> 3.10.9

2022-12-23T23:05:50+00:00

Security and bug fixes. Drop patch for CVE-2022-42919 and CVE-2022-37454 which were merged in 3.10.9 Fixes: * CVE-2022-45061 (gh-98433) https://nvd.nist.gov/vuln/detail/CVE-2022-45061 List of changes: https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-9-final (From OE-Core rev: f98b9c71686eb5ce5115ee73155a7d0389831ef0) Signed-off-by: Florin Diaconescu Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: advance to version 3.10.8

2022-12-13T15:23:34+00:00

Fixes CVE-2022-37460. Also add patch to fix CVE-2022-37454. (From OE-Core rev: b446dd69b79783ea232514e1c5212595ec28e553) Signed-off-by: Joe Slater Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: fix CVE-2022-42919 local privilege escalation via the multiprocessing forkserver start method

2022-12-01T19:35:04+00:00

Upstream-Status: Backport from https://github.com/python/cpython/commit/eae692eed18892309bcc25a2c0f8980038305ea2 (From OE-Core rev: 9ed7184930707c98afabca8c6b712df874ad659f) Signed-off-by: Vivek Kumbhar Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

get_module_deps3.py: Check attribute 'file'

2022-11-24T15:30:01+00:00

Check if the module object has attribute '__file__' to fix and avoid errors like: AttributeError: module '_abc' has no attribute '__file__'. Did you mean: '__name__'? (From OE-Core rev: 1684457df9fb7029a276df4438c8fc4a17e3e1e9) Signed-off-by: Leon Anavi Signed-off-by: Alexandre Belloni (cherry picked from commit 8acce12c1a4cf37ac312c92d62a6ae93a349dddf) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: upgrade 3.10.4 -> 3.10.7

2022-10-20T14:36:02+00:00

Security and bug fixes. Drop patch for gh-92036 which was merged in 3.10.5 Refresh 0017-setup.py-do-not-report-missing-dependencies-for-disa.pathc Fixes: * CVE-2020-10735 https://nvd.nist.gov/vuln/detail/CVE-2020-10735 * CVE-2021-28861 https://nvd.nist.gov/vuln/detail/CVE-2021-28861 * CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 For a list of changes see: https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-7-final https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final (From OE-Core rev: 3efae85283b19fa1b30af7fed7fa89d7a50337db) Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Backport patch to fix an issue in subinterpreters

2022-07-25T14:11:46+00:00

This adds a backport patch that fixes a problem in subinterpreters related to the garbagecollector. Without the patch, there are random segfaults in several Kodi addons that use python3-sqlite3. Presumably there are real world issues in other programs as well. (From OE-Core rev: 39d57ef7e341a048b94bc5dd9c29d58f57e06f19) Signed-off-by: Markus Volk Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python: Avoid shebang overflow on python-config.py

2022-06-24T22:57:42+00:00

The native path may be too big, leading to shebang overflow. Just use the #!/usr/bin/env python3. (From OE-Core rev: 8a86bd88f0b46b0f413b98df20891cb9aa84c271) Signed-off-by: Paulo Neves Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 84783dee09e48cb930c7cd27944eaf3f03997237) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Ensure stale empty python module directories don't break the build

2022-06-24T22:57:42+00:00

There are two issues inside importlib. Firstly, the modules are accessed in on disk order. This means behaviour seen on one system might not reproduce on another and is a real headache. Secondly, empty directories left behind by previous modules might be looked at. This has caused a long string of different issues for us. As a result, patch this to a behaviour which works for us. Upstream discussion can follow later, this is breaking builds for too many people to leave unpatched. [YOCTO #14816] (From OE-Core rev: cdb6879b49d4f6dc2bea8ff064a5b1e62db34781) Signed-off-by: Richard Purdie (cherry picked from commit e5944a38db513e033c3a3e9313267055f7254be7) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: use built-in distutils for ptest, rather than setuptools' 'fork'

2022-06-24T22:57:42+00:00

The setuptools version is now used by default when setuptools is installed, but it is incompatible with some of python's own tests. (From OE-Core rev: 8e34686911269e461dc646068f7a4d7c0e5da53f) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit c0c1ee33781733d712cd983be460001cd7938014) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Do not detect multiarch when cross compiling

2022-04-13T15:52:24+00:00

This was a long standing problem seen on aarch64 build hosts when compiling python3 with clang cross compiler. The issue is not seen with gcc because native glibc headers are still compatible with gcc cross compiler (From OE-Core rev: 407744b00d702e3133304e1b43064a5634ca02cf) Signed-off-by: Khem Raj Cc: Ross Burton Cc: Jon Mason Signed-off-by: Richard Purdie

linux/poky.git/meta/recipes-devtools/python/python3, branch yocto-4.0.8

python3: upgrade 3.10.8 -> 3.10.9

python3: advance to version 3.10.8

python3: fix CVE-2022-42919 local privilege escalation via the multiprocessing forkserver start method

get_module_deps3.py: Check attribute '__file__'

python3: upgrade 3.10.4 -> 3.10.7

python3: Backport patch to fix an issue in subinterpreters

python: Avoid shebang overflow on python-config.py

python3: Ensure stale empty python module directories don't break the build

python3: use built-in distutils for ptest, rather than setuptools' 'fork'

python3: Do not detect multiarch when cross compiling

get_module_deps3.py: Check attribute 'file'