linux/poky.git/meta/recipes-devtools/python, branch kirkstone-4.0.5

python3: upgrade 3.10.4 -> 3.10.7

2022-10-20T14:36:02+00:00

Security and bug fixes. Drop patch for gh-92036 which was merged in 3.10.5 Refresh 0017-setup.py-do-not-report-missing-dependencies-for-disa.pathc Fixes: * CVE-2020-10735 https://nvd.nist.gov/vuln/detail/CVE-2020-10735 * CVE-2021-28861 https://nvd.nist.gov/vuln/detail/CVE-2021-28861 * CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 For a list of changes see: https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-7-final https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final (From OE-Core rev: 3efae85283b19fa1b30af7fed7fa89d7a50337db) Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3-rfc3986-validator: switch from SRC_URI:append to SRC_URI +=

2022-09-28T07:02:11+00:00

The :append can not be removed via bbappends if needed. Thus it's better for open source layers to use += append if possible. (From OE-Core rev: 1e09be9455fb054b3f74f088b355116828cb4626) (From OE-Core rev: 15ac2f4f2873a3c7b9f5bd0385d570e7b64fc643) Signed-off-by: Mikko Rapeli Signed-off-by: Richard Purdie (cherry picked from commit 4546b5186e5aa2808be6c1616eca15219c4fcb5d) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3-pip: Fix RDEPENDS after the update

2022-08-28T06:51:30+00:00

Fix the following error messages: ModuleNotFoundError: No module named 'distutils' ModuleNotFoundError: No module named 'colorsys' (From OE-Core rev: 3e1c254f71a4d22ebde063e23242cd838fb917f9) Signed-off-by: Daiane Angolini Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 8beef93e6e341566eba8a125f75ad836ac6a3d69) Signed-off-by: Jose Quaresma Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Backport patch to fix an issue in subinterpreters

2022-07-25T14:11:46+00:00

This adds a backport patch that fixes a problem in subinterpreters related to the garbagecollector. Without the patch, there are random segfaults in several Kodi addons that use python3-sqlite3. Presumably there are real world issues in other programs as well. (From OE-Core rev: 39d57ef7e341a048b94bc5dd9c29d58f57e06f19) Signed-off-by: Markus Volk Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python: Avoid shebang overflow on python-config.py

2022-06-24T22:57:42+00:00

The native path may be too big, leading to shebang overflow. Just use the #!/usr/bin/env python3. (From OE-Core rev: 8a86bd88f0b46b0f413b98df20891cb9aa84c271) Signed-off-by: Paulo Neves Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 84783dee09e48cb930c7cd27944eaf3f03997237) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Ensure stale empty python module directories don't break the build

2022-06-24T22:57:42+00:00

There are two issues inside importlib. Firstly, the modules are accessed in on disk order. This means behaviour seen on one system might not reproduce on another and is a real headache. Secondly, empty directories left behind by previous modules might be looked at. This has caused a long string of different issues for us. As a result, patch this to a behaviour which works for us. Upstream discussion can follow later, this is breaking builds for too many people to leave unpatched. [YOCTO #14816] (From OE-Core rev: cdb6879b49d4f6dc2bea8ff064a5b1e62db34781) Signed-off-by: Richard Purdie (cherry picked from commit e5944a38db513e033c3a3e9313267055f7254be7) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: Remove problematic paths from sysroot files

2022-06-24T22:57:42+00:00

In the native sysroot we should never have paths to the python3-native build directory. These may or may not exist at the time some dependency is building and nothing should rely upon them. I suspect nothing is relying on this at the moment but clean up just to be sure. The various config copies are adjusted to be modified consistently as some copies were and some were not. The Makefile has the "bad" ${B} paths replaced with a dummy placeholder too. (From OE-Core rev: 2f93d30fee0698e3cf13be17f1691e85d2122b0e) Signed-off-by: Richard Purdie (cherry picked from commit ae9e6249ded8fc063d6333231c391cfa2d594567) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: use built-in distutils for ptest, rather than setuptools' 'fork'

2022-06-24T22:57:42+00:00

The setuptools version is now used by default when setuptools is installed, but it is incompatible with some of python's own tests. (From OE-Core rev: 8e34686911269e461dc646068f7a4d7c0e5da53f) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit c0c1ee33781733d712cd983be460001cd7938014) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: fix reproducibility issue with python3-core

2022-05-25T21:45:50+00:00

traceback.cpython-310.pyc is non-deterministic due to 'frozenset' being written without strict ordering. For now let's just not install the problematic file. (From OE-Core rev: 00b62965bd4c9eb6fd8c016f83126da2a107a5c5) Signed-off-by: Steve Sakoman Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 4b1f0f7542abcb8606688c974695a6c8a142e7a2) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3: ignore CVE-2015-20107

2022-05-04T12:07:31+00:00

CVE-2015-20107 describes an arbitrary command execution in the mailcap module, but this is by design in mailcap and needs to be worked around by the calling application. Upstream Python will be documenting this flaw in the library reference, and it is likely that the mailcap module will be deprecated and removed in the future. (From OE-Core rev: f525745af38b0e5ea26693849cd4f19c627efd46) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 85fac8408baf92d8b71946f5bfea92952b7eab01) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie