<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/python, branch dunfell-23.0.6</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=dunfell-23.0.6</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=dunfell-23.0.6'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2021-02-18T16:48:28+00:00</updated>
<entry>
<title>python3-pycairo: use python3targetconfig</title>
<updated>2021-02-18T16:48:28+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2020-11-13T19:48:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=0ad8ef9d43eaecaee479640e4cf1c1a0a3a73fa1'/>
<id>urn:sha1:0ad8ef9d43eaecaee479640e4cf1c1a0a3a73fa1</id>
<content type='text'>
(From OE-Core rev: ba32302980f3885acc97f1aa85bfcede29099b47)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit dadf001c85938b831def8da5851a40dc0977e3d0)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: Use addtask statement instead of task dependencies</title>
<updated>2021-02-10T23:55:53+00:00</updated>
<author>
<name>Tomasz Dziendzielski</name>
<email>tomasz.dziendzielski@gmail.com</email>
</author>
<published>2021-01-25T23:56:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4633b1696d21e43f763c934b63eb757160c4b185'/>
<id>urn:sha1:4633b1696d21e43f763c934b63eb757160c4b185</id>
<content type='text'>
The externalsrc class deletes do_patch task which results with:
| ERROR: Task do_create_manifest in &lt;PATH&gt;/python3_3.8.2.bb depends upon
| non-existent task do_patch in &lt;PATH&gt;/python3_3.8.2.bb

Use addtask to define correct order to prevent this error, since addtask
mechanism accepts deleted tasks.

[YOCTO #14151]

(From OE-Core rev: 35ca0a401e62a8a8b88c3089929eda401a90f762)

Signed-off-by: Tomasz Dziendzielski &lt;tomasz.dziendzielski@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit a746d034fa7eaad4f4876fa61c5a8c3c15e211c8)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: Avoid installing test data into recipe-sysroot</title>
<updated>2021-02-05T23:37:04+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-01-27T17:12:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=cc711af144afb98d328413ebed02bbf58cfc35ed'/>
<id>urn:sha1:cc711af144afb98d328413ebed02bbf58cfc35ed</id>
<content type='text'>
There are several thousand files in the test directory which we don't need.
Adding these for the native and target sysroots is a crazy amount of files
to be throwing around needlessly. Delete the files from the sysroot side
of things to tidy up the sysroots and improve performance.

(From OE-Core rev: f73ac290617e89b80e10dc700c0e90efddc8e1b2)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit f6bced03011ad1663d68b0322a2f8aeb4d836646)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2019-20907</title>
<updated>2020-12-18T14:20:19+00:00</updated>
<author>
<name>Andrej Valek</name>
<email>andrej.valek@siemens.com</email>
</author>
<published>2020-12-09T08:09:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=31e97c2cae0b54cd8858c8956d97a6d6f51fffdd'/>
<id>urn:sha1:31e97c2cae0b54cd8858c8956d97a6d6f51fffdd</id>
<content type='text'>
 - move fixing patch for CVE-2020-8492 to the right location

(From OE-Core rev: f7e7378ea7099af8555de809787cf8e2cb5208fd)

Signed-off-by: Andrej Valek &lt;andrej.valek@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: add CVE-2007-4559 to whitelist</title>
<updated>2020-12-09T23:49:01+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross@burtonini.com</email>
</author>
<published>2020-11-19T10:38:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4e8a6a05b7bd9f0da27fa1ce7efa8a77e485786a'/>
<id>urn:sha1:4e8a6a05b7bd9f0da27fa1ce7efa8a77e485786a</id>
<content type='text'>
This issue describes expected behaviour, do not use tarfile with
untrusted data.

(From OE-Core rev: 267130c66dde462a0a1043ab5dffdb86781389a0)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit f4c22e83f2e68ff157da5ea1303acc2931d63f5f)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2020-27619</title>
<updated>2020-11-24T13:17:59+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2020-11-19T11:00:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9c5ec3fd7b65cebe2b570cfc0638a0e0c6f09230'/>
<id>urn:sha1:9c5ec3fd7b65cebe2b570cfc0638a0e0c6f09230</id>
<content type='text'>
(From OE-Core rev: 001ee91818642ddac7c1b8e5236baa5c4c542b72)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: whitelist CVE-2020-15523</title>
<updated>2020-11-24T13:17:59+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2020-11-19T11:00:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=17d7d64ebe0cba430849ba434fc49923e3d4cb59'/>
<id>urn:sha1:17d7d64ebe0cba430849ba434fc49923e3d4cb59</id>
<content type='text'>
This CVE is issue on _Py_CheckPython3 uses uninitialized dllpath when embedder sets module path with Py_SetPath.
Since it is .dll issue (on windows only), hence whitelist it.

https://bugs.python.org/issue29778

(From OE-Core rev: c216431d0704bd8be237e860bbdc32be34a82aee)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: add ldconfig rdepends for python3-ctypes</title>
<updated>2020-11-22T13:27:37+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2020-07-02T02:33:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=75997e9e80d8835b2b0bbfd6d223892cd47fb4ee'/>
<id>urn:sha1:75997e9e80d8835b2b0bbfd6d223892cd47fb4ee</id>
<content type='text'>
The ctypes module needs to use "ldconfig -p" to find the
library path and it simply has below logic if no ldconfig
installed.
  except OSError:
      pass

Before the patch:
  &gt;&gt;&gt; from ctypes.util import find_library
  &gt;&gt;&gt; lib_path = find_library('archive')
  &gt;&gt;&gt; print(lib_path)
  None

After the patch:
  &gt;&gt;&gt; from ctypes.util import find_library
  &gt;&gt;&gt; lib_path = find_library('archive')
  &gt;&gt;&gt; print(lib_path)
  libarchive.so.13

(From OE-Core rev: 84e1a32096db9deb98d282a652beec95dbfe80f1)

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit ddb96902a124a6e1f035f0fd868b0139989bc1bc)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2020-26116</title>
<updated>2020-10-27T22:42:20+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2020-10-19T12:59:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=002113701a6db5c2ecbcf87e222494e94aaaf05f'/>
<id>urn:sha1:002113701a6db5c2ecbcf87e222494e94aaaf05f</id>
<content type='text'>
(From OE-Core rev: 2f607a61a820bfbc369f779c3161a339f088d04f)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>meta: add/fix invalid Upstream-Status tags</title>
<updated>2020-10-06T13:15:21+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross@burtonini.com</email>
</author>
<published>2020-09-25T16:04:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5fb7913c5e337a16b07a1a45417ab91361e97360'/>
<id>urn:sha1:5fb7913c5e337a16b07a1a45417ab91361e97360</id>
<content type='text'>
(From OE-Core rev: 4dbae5c7c28a2cd6ebb601f984a54ca33d19afaf)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 630ce8130598e2bca7231ac28a7cc18b5b942544)
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
