linux/poky.git/meta/recipes-devtools/python/python_2.7.16.bb, branch warrior

python: update to 2.7.17

2020-01-16T22:38:52+00:00

Drop backports, rebase a couple of patches. This is the second last release of py 2.x; upstream support ends on 1 January 2020, there will be one final 2.x afterwards. Note that the only thing that still needs python 2.x in oe-core is u-boot; when the next u-boot update arrives, we should find out where the py3 migration is for that component before merging the update. (From OE-Core rev: 184b60eb905bb75ecc7a0c29a175e624d8555fac) (From OE-Core rev: 7009d823a0799ce7132bd77329b273a476718c8c) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal [Minor fixup for warrior context] Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: fix CVE-2019-16935

2020-01-16T22:38:52+00:00

(From OE-Core rev: 1a7593bcdaf8a8cf15259aee8a0e2686247f2987) (From OE-Core rev: 27fea8ea1da28bb3163b5d503e6d16948c50f2ae) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: Fix CVE-2019-10160

2019-10-30T13:47:54+00:00

(From OE-Core rev: 23d48f2bea2d358bd8d7d4efd07792bc1f3666bd) Signed-off-by: Changqing Li Signed-off-by: Ross Burton (cherry picked from commit b4240b585d7fcac2fdbf33a8e72d48cb732eb696) Signed-off-by: Armin Kuster (cherry picked from commit 10d87a3085665a959a5fda64ae3895cb27ddf343) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: CVE-2019-16056

2019-10-30T13:47:54+00:00

(From OE-Core rev: 49ff6c7ef1d366007c49083f4e5faaf5a9eb086f) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster (cherry picked from commit 27be9cf71a6fe906a23e81b56f1cc18a6fc9ef97) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: add tk-lib as runtime dependency for python-tkinter

2019-10-30T13:47:54+00:00

Fixes: ERROR: python-2.7.16-r0 do_package_qa: QA Issue: /usr/lib/python2.7/lib-dynload/_tkinter.so contained in package python-tkinter requires libtk8.6.so, but no providers found in RDEPENDS_python-tkinter? [file-rdeps] (From OE-Core rev: f83ecbabb911c46de77708ede759a0b768928ea2) Signed-off-by: Yi Zhao Signed-off-by: Ross Burton (cherry picked from commit f78248a2380bbbbf271b5bb02c762f5bc7a3a92e) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: include CVE patches for python-native as well

2019-10-30T13:47:54+00:00

Also avoids maintaining a different set of patches for both. (From OE-Core rev: e73d5bb4a21497ed645e2a0a4b88c2eeaf65080a) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit b3b1c00cc46b33ddbf7e008267032220e1e298af) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: fix CVE-2019-9740

2019-09-30T15:44:41+00:00

(From OE-Core rev: 8eddac3305b7b428565103cde88cba444e3f0dd0) (From OE-Core rev: feb8ba6821da5c5ccb7b3f9d71eb9f8859006d23) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: add a fix for CVE-2019-9948 and CVE-2019-9636

2019-06-07T12:57:48+00:00

(From OE-Core rev: 6c8994a6ae8860c4b27d8ec990344c6b099cc685) Signed-off-by: Martin Jansa Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: update to 2.7.16

2019-06-07T12:57:48+00:00

Drop backported patches License-update: copyright years (From OE-Core rev: 0fec1d486a3ef663dc4bbab76e5ec0ed646f23e4) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie