linux/poky.git/meta/recipes-devtools/python/python_2.7.3.bb, branch yocto-2.4.4

Python: Upgrade from 2.7.3 to 2.7.9:

2015-02-23T17:35:29+00:00

- Based on Paul Eggletons work to partially upgrade to Python 2.7.6 Modified: default-versions.inc: switched to python 2.7.9 generate-manifest-2.7.py: fixed _sysconfigdata python-2.7-manifest.inc: fixed _sysconfigdata python.inc: Updated checksums and source, no LICENSE change just updated some dates python-native_2.7.3 -> python-native_2.7.9 and updated patches python_2.7.3 -> python_2.7.9, and added ac_cv_file__dev_ptmx=no ac_cv_file__dev_ptc=no in EXTRA_OECONF to solve python issue #3754, only needed when cross compiling, also updated patches use_sysroot_ncurses_instead_of_host.patch: New patch to use ncursesw from sysroot instead of hosts, introduced by fix for python issue #15268 Rebased: 01-use-proper-tools-for-cross-build.patch 03-fix-tkinter-detection.patch 05-enable-ctypes-cross-build.patch 06-avoid_usr_lib_termcap_path_in_linking.patch avoid_warning_about_tkinter.patch builddir.patch fix_for_using_different_libdir.patch host_include_contamination.patch multilib.patch nohostlibs.patch search_db_h_in_inc_dirs_and_avoid_warning.patch Deleted (fixed on upstream): 06-ctypes-libffi-fix-configure.patch CVE-2013-4073_py27.patch gcc-4.8-fix-configure-Wformat.patch json-flaw-fix.patch posix_close.patch pypirc-secure.patch python-2.7.3-CVE-2012-2135.patch python-2.7.3-CVE-2013-1752-smtplib-fix.patch python-2.7.3-CVE-2014-1912.patch python-2.7.3-CVE-2014-7185.patch python-2.7.3-berkeley-db-5.3.patch python-fix-build-error-with-Readline-6.3.patch remove-BOM-insection-code.patch remove_sqlite_rpath.patch python2.7.3-nossl3.patch [YOCTO #7059] (From OE-Core rev: d4ad95f0d5f08891637c644e85b09da9c4585059) Signed-off-by: Alejandro Hernandez Signed-off-by: Richard Purdie

python: Disables SSLv3

2015-02-02T14:09:20+00:00

This is related to "SSLv3 POODLE vulnerability" CVE-2014-3566 Building python without SSLv3 support when openssl is built without any support for SSLv3 (e.g. by adding EXTRA_OECONF = " -no-ssl3" in the openssl recipes). Backport from: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768611#22 [python2.7-nossl3.patch] only Modules/_ssl.c is backported. References: https://bugzilla.yoctoproject.org/show_bug.cgi?id=7015 https://bugzilla.yoctoproject.org/show_bug.cgi?id=6843 http://bugs.python.org/issue22638 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566 (From OE-Core rev: 3462cac82cf0ab32e5e530f543b14fdcc211c678) Signed-off-by: Sona Sarmadi Signed-off-by: Richard Purdie

python: fix B != S

2015-01-16T23:08:27+00:00

And bump PR to avoid: gcc: error: Parser/tokenizer_pgen.o: No such file or directory gcc: error: Parser/printgrammar.o: No such file or directory gcc: error: Parser/pgenmain.o: No such file or directory (From OE-Core rev: aea42f59c8331c4d5944f698453bfd663aa0c59d) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

python: remove spurious nativesdk dependency

2014-12-05T18:01:04+00:00

There's no need to add a dependency on python-crypt_class-native to nativesdk-openssl as the general dependency there is transformed appropriately. Presumably this is cruft from back when SDK packages were suffixed instead of prefixed, and there were mapping problems. (From OE-Core rev: f0b1eab1ef24fabac98609eb9d314f618dca713a) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python: ensure all of Python is installed in nativesdk

2014-12-05T18:01:04+00:00

If any part of Python gets installed in a SDK, we need to ensure that all of Python gets installed to avoid replacing python in the environment with a minimal package set. [ YOCTO #6735 ] (From OE-Core rev: e36ff98a7a4da478bb886f61005cd72a0b5a9c0e) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python: Fix CVE-2014-7185

2014-11-20T14:08:10+00:00

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function. This back-ported patch fixes CVE-2014-7185 (From OE-Core rev: 49ceed974e39ab8ac4be410e5caa5e1ef7a646d9) Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python-2.7.3:remove BOM insertion code

2014-11-04T10:27:11+00:00

Backport patch from: https://hg.python.org/cpython/rev/af46a001d5ec SysLogHandler converts message to utf8 and adds BOM, supposedly to conform with RFC5424, but the implementation is broken: the RFC specifies that the BOM should prefix only unstructured message part, but current Python implementation puts it in the middle of structured part, thus confusing RFC-compliant receivers. (From OE-Core rev: c51caffe5ac0d49844dcbac7967f609d44c20470) Signed-off-by: yzhu1 Signed-off-by: Kai Kang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python: force off_t size to 8 to enable large file support

2014-10-18T14:14:03+00:00

If DISTRO_FEATURES contains "largefile", force the size of off_t to 8 as a workaround for having ac_cv_sizeof_off_t=4 on 32-bit systems. In future we will likely drop the value from the site file, but for now this is a slightly safer fix. Fixes [YOCTO #6813]. (From OE-Core rev: a8216030ee6c65531de8fbf3eed878a345a94edc) Signed-off-by: Paul Eggleton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

python: obey LDFLAGS

2014-09-22T12:04:22+00:00

(From OE-Core rev: 7191b6b7503a5a17f93bd61283f22d409c5cb17b) Signed-off-by: Christopher Larson Signed-off-by: Richard Purdie

python: Fix build on musl

2014-08-15T17:21:48+00:00

musl has posix_close which conflicts in python so lets rename it. (From OE-Core rev: 9de4f6eb07696f618d4762c6eeb34dc9ea3080bd) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie