<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/python, branch gatesgarth</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=gatesgarth</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=gatesgarth'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2021-03-28T21:31:55+00:00</updated>
<entry>
<title>python3-jinja2: set CVE_PRODUCT</title>
<updated>2021-03-28T21:31:55+00:00</updated>
<author>
<name>Chen Qi</name>
<email>Qi.Chen@windriver.com</email>
</author>
<published>2021-03-05T08:29:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=09cc67b9da6c3d248a88516349afb46fb00a7d51'/>
<id>urn:sha1:09cc67b9da6c3d248a88516349afb46fb00a7d51</id>
<content type='text'>
Set CVE_PRODUCT for more accurate CVE scanning.

(From OE-Core rev: 1e3638352ed8dcf1cba274693db8410cc9a6ec3d)

Signed-off-by: Chen Qi &lt;Qi.Chen@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit aefcc7a7dd012530ed846292caaed70d20589a3a)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2021-23336</title>
<updated>2021-03-10T00:24:27+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2021-03-02T09:36:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=12d767f88cf5023e33b39b227c04b79391c26f94'/>
<id>urn:sha1:12d767f88cf5023e33b39b227c04b79391c26f94</id>
<content type='text'>
(From OE-Core rev: 4ae100fa8baf0f0dd6a16992644a20516b81107b)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: Fix python interpreter line length for nativesdk</title>
<updated>2021-03-10T00:24:26+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2021-02-22T01:21:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e35f1eef03a1cdae15d2050a67de962a828a07cd'/>
<id>urn:sha1:e35f1eef03a1cdae15d2050a67de962a828a07cd</id>
<content type='text'>
Make sure the python interpreter is "#!/usr/bin/env python3" for
nativesdk to avoid the shebang path exceeding the limit when install
the sdk under the directory with long path.

Before:
 $ cd ${target_sdk_dir}
 $ vi ./sysroots/x86_64-oesdk-linux/usr/bin/2to3
 #!${target_sdk_dir}/sysroots/${SDK_SYS}/usr/bin/python3.9
 [snip]

After:
 $ cd ${target_sdk_dir}
 $ vi ./sysroots/x86_64-oesdk-linux/usr/bin/2to3
 #!/usr/bin/env python3
 [snip]

(From OE-Core rev: 57af8ed4d3f1645d9a648ae1e569c792d9bcb361)

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit a748e6098fa7d2ff594319937c7e0cf97700e83a)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3-pycairo: use python3targetconfig</title>
<updated>2021-02-11T17:46:12+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2020-11-13T19:48:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=95a02ba29cf07d460481583db20233c9267d04fc'/>
<id>urn:sha1:95a02ba29cf07d460481583db20233c9267d04fc</id>
<content type='text'>
(From OE-Core rev: 23884b5839a57b4ed306a938ce3f7e68db752f3a)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 27d1dcf065ac2ccb57229eef54dd63b45d0fc5f9)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: Avoid installing test data into recipe-sysroot</title>
<updated>2021-02-11T17:46:11+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-01-27T17:12:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=09f368042fa486df448c8b7b2f826cb30c9e03a4'/>
<id>urn:sha1:09f368042fa486df448c8b7b2f826cb30c9e03a4</id>
<content type='text'>
There are several thousand files in the test directory which we don't need.
Adding these for the native and target sysroots is a crazy amount of files
to be throwing around needlessly. Delete the files from the sysroot side
of things to tidy up the sysroots and improve performance.

(From OE-Core rev: 653f8b1a8adf59d924028bfc69ead1c7437de11e)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit f6bced03011ad1663d68b0322a2f8aeb4d836646)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: Use addtask statement instead of task dependencies</title>
<updated>2021-02-05T23:35:18+00:00</updated>
<author>
<name>Tomasz Dziendzielski</name>
<email>tomasz.dziendzielski@gmail.com</email>
</author>
<published>2021-01-25T23:56:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e4de6d1752b05350d062a9ff3c0ec26c68a64df7'/>
<id>urn:sha1:e4de6d1752b05350d062a9ff3c0ec26c68a64df7</id>
<content type='text'>
The externalsrc class deletes do_patch task which results with:
| ERROR: Task do_create_manifest in &lt;PATH&gt;/python3_3.8.2.bb depends upon
| non-existent task do_patch in &lt;PATH&gt;/python3_3.8.2.bb

Use addtask to define correct order to prevent this error, since addtask
mechanism accepts deleted tasks.

[YOCTO #14151]

(From OE-Core rev: a746d034fa7eaad4f4876fa61c5a8c3c15e211c8)

(From OE-Core rev: 782f7f4f73d7b1e1bd649db1984a63d94d2410fe)

Signed-off-by: Tomasz Dziendzielski &lt;tomasz.dziendzielski@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit 8ed8b81af60c7d9c7a1c614ad137408637bc43ed)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2021-3177</title>
<updated>2021-02-05T23:35:18+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2021-02-01T03:20:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=482b1fc4d96fce1b2e3f0bd5cf763c28f30d8b95'/>
<id>urn:sha1:482b1fc4d96fce1b2e3f0bd5cf763c28f30d8b95</id>
<content type='text'>
(From OE-Core rev: 25d1cae49e56797c4c9e91c01697c4de02dee046)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: add CVE-2007-4559 to whitelist</title>
<updated>2020-12-03T23:02:08+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross@burtonini.com</email>
</author>
<published>2020-11-19T10:38:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=086ed4af2a830fb2ea3a5f7db2dc04cfe9aab3eb'/>
<id>urn:sha1:086ed4af2a830fb2ea3a5f7db2dc04cfe9aab3eb</id>
<content type='text'>
This issue describes expected behaviour, do not use tarfile with
untrusted data.

(From OE-Core rev: 391ed53928db0df325798a0bce18ec6947e09ddd)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit f4c22e83f2e68ff157da5ea1303acc2931d63f5f)
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2020-27619</title>
<updated>2020-11-29T00:07:58+00:00</updated>
<author>
<name>Lee Chee Yang</name>
<email>chee.yang.lee@intel.com</email>
</author>
<published>2020-11-19T09:43:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f4ff33fd11d86a37e751d23ab471526c1c71efbf'/>
<id>urn:sha1:f4ff33fd11d86a37e751d23ab471526c1c71efbf</id>
<content type='text'>
(From OE-Core rev: 0edf9f32929c462b9b53f0cdc7e5ecf816fbb7b3)

Signed-off-by: Lee Chee Yang &lt;chee.yang.lee@intel.com&gt;
Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix upstream version check</title>
<updated>2020-10-20T10:11:46+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2020-10-19T15:42:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=714ee386e6cea5edd4c31c2808ea31a46f5afa48'/>
<id>urn:sha1:714ee386e6cea5edd4c31c2808ea31a46f5afa48</id>
<content type='text'>
(From OE-Core rev: c8a6512b36e12f48d8713c5c3b48d83a431c8191)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
