linux/poky.git/meta/recipes-devtools/python, branch warrior

python3-testtools: Avoid traceback2 module requirement

2020-09-16T12:34:54+00:00

traceback2 adds traceback for python2. Rather than depend on traceback2, we're python3 only so just use traceback. This caused breakage in oe-selftest -j which uses testtools on the autobuilder using buildtools-tarball. [YOCTO #13652] (From OE-Core rev: ee80a06c107375e3cf0d246ea17c09dda4536dab) (From OE-Core rev: ee82e3c24fe5727ce81e972cadedca431d6086c5) (From OE-Core rev: be4470c9590183b388d9ff176331d0c50984dec8) Signed-off-by: Richard Purdie

python: Upgrade 2.7.17 -> 2.17.18

2020-05-22T15:23:29+00:00

LICENSE checksum changed due to 2019 -> 2020 update. (From OE-Core rev: 65ab890bbdd5b104867d80b721be117a9d269aff) Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python3: Upgrade 3.7.6 -> 3.7.7

2020-04-08T23:07:12+00:00

THE LICENSE checksum changed in this update due to copyright notice added for 2020. (From OE-Core rev: 2af49cebd669bd2992d57a586e2a06bbad09e945) Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python2: add ntpath

2020-02-21T09:44:05+00:00

python3 has this but python is missing this. [Yocto #13740] (From OE-Core rev: 3e69681857b88be44797d1d302b9e44a46a7634d) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie (cherry picked from commit af41a2238beec0c34c1c1e5f25eed55f2a214643) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python3: RDEPEND on libgcc

2020-01-28T11:15:01+00:00

Python uses features of glibc that require it to dynamically load (i.e. dlopen()) libgcc_s at runtime. However, since this isn't a link time dependency, it doesn't get picked up automatically by bitbake so manually add it to RDEPENDS. There is an outstanding bug in Python to make it explicitly link against libgcc at link time which would remove the need for this. See: https://bugs.python.org/issue37395 (From OE-Core rev: 04297ee03f5f4e4edafaf332a6648465f52ba1eb) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster [ merged the fix to make it glibc only ] Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

python3: Upgrade 3.7.5 -> 3.7.6

2020-01-28T11:15:01+00:00

(From OE-Core rev: 262ac0c4d534b1858b81c7d69b6ff57c5d3a4559) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

python/python3: Whitelist CVE-2019-18348

2020-01-28T11:15:01+00:00

This is not exploitable when glibc has CVE-2016-10739 fixed, which is fixed in the upstream version since warrior. (From OE-Core rev: a2507600fecdf815ad80da569c5e8ad65286b812) Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652

2020-01-28T11:15:01+00:00

One Windows-only CVE that cannot be fixed, and two CVEs where upstream agreement is that they are not vulnerabilities. (From OE-Core rev: 1b69d141b73e46cc377f8566868da44dd5b1ea42) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

python: update to 2.7.17

2020-01-16T22:38:52+00:00

Drop backports, rebase a couple of patches. This is the second last release of py 2.x; upstream support ends on 1 January 2020, there will be one final 2.x afterwards. Note that the only thing that still needs python 2.x in oe-core is u-boot; when the next u-boot update arrives, we should find out where the py3 migration is for that component before merging the update. (From OE-Core rev: 184b60eb905bb75ecc7a0c29a175e624d8555fac) (From OE-Core rev: 7009d823a0799ce7132bd77329b273a476718c8c) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal [Minor fixup for warrior context] Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

python: fix CVE-2018-20852

2020-01-16T22:38:52+00:00

(From OE-Core rev: 98cc3bfc6656b8648da591dcb64de8472e6c97e0) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie