<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/python, branch yocto-2.7.2</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-2.7.2</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-2.7.2'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2019-10-30T13:47:54+00:00</updated>
<entry>
<title>python: Fix CVE-2019-10160</title>
<updated>2019-10-30T13:47:54+00:00</updated>
<author>
<name>Changqing Li</name>
<email>changqing.li@windriver.com</email>
</author>
<published>2019-10-29T09:47:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f29207ae997e829fcdf781ce3b566c96da3c9390'/>
<id>urn:sha1:f29207ae997e829fcdf781ce3b566c96da3c9390</id>
<content type='text'>
(From OE-Core rev: 23d48f2bea2d358bd8d7d4efd07792bc1f3666bd)

Signed-off-by: Changqing Li &lt;changqing.li@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
(cherry picked from commit b4240b585d7fcac2fdbf33a8e72d48cb732eb696)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
(cherry picked from commit 10d87a3085665a959a5fda64ae3895cb27ddf343)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: CVE-2019-16056</title>
<updated>2019-10-30T13:47:54+00:00</updated>
<author>
<name>Chen Qi</name>
<email>Qi.Chen@windriver.com</email>
</author>
<published>2019-10-29T09:47:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=0e55cd3815cd47d5f3d7de51dfccc14cbeb1250d'/>
<id>urn:sha1:0e55cd3815cd47d5f3d7de51dfccc14cbeb1250d</id>
<content type='text'>
(From OE-Core rev: 49ff6c7ef1d366007c49083f4e5faaf5a9eb086f)

Signed-off-by: Chen Qi &lt;Qi.Chen@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
(cherry picked from commit 27be9cf71a6fe906a23e81b56f1cc18a6fc9ef97)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: add tk-lib as runtime dependency for python-tkinter</title>
<updated>2019-10-30T13:47:54+00:00</updated>
<author>
<name>Yi Zhao</name>
<email>yi.zhao@windriver.com</email>
</author>
<published>2019-10-29T09:47:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=cd8a048b620b04dcaa7969d70684bcad243ccc58'/>
<id>urn:sha1:cd8a048b620b04dcaa7969d70684bcad243ccc58</id>
<content type='text'>
Fixes:
ERROR: python-2.7.16-r0 do_package_qa: QA Issue:
/usr/lib/python2.7/lib-dynload/_tkinter.so contained in package
python-tkinter requires libtk8.6.so, but no providers found in
RDEPENDS_python-tkinter? [file-rdeps]

(From OE-Core rev: f83ecbabb911c46de77708ede759a0b768928ea2)

Signed-off-by: Yi Zhao &lt;yi.zhao@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
(cherry picked from commit f78248a2380bbbbf271b5bb02c762f5bc7a3a92e)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: include CVE patches for python-native as well</title>
<updated>2019-10-30T13:47:54+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2019-10-29T09:47:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9cb405a3eb8c4f164775370851810e0159a9786f'/>
<id>urn:sha1:9cb405a3eb8c4f164775370851810e0159a9786f</id>
<content type='text'>
Also avoids maintaining a different set of patches for both.

(From OE-Core rev: e73d5bb4a21497ed645e2a0a4b88c2eeaf65080a)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
(cherry picked from commit b3b1c00cc46b33ddbf7e008267032220e1e298af)
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: upgrade 3.7.3 -&gt; 3.7.4</title>
<updated>2019-10-08T21:51:35+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2019-10-01T19:58:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=eacd4b0f0ca3aa04dab5f2efd7567d4fa0c2845b'/>
<id>urn:sha1:eacd4b0f0ca3aa04dab5f2efd7567d4fa0c2845b</id>
<content type='text'>
Also fixes CVE-2019-9740, CVE-2019-9948. For details, see:

https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-final

(From OE-Core rev: 6b7604c536a7a2da99490a7550f997a8e35ca043)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
[ Backported patch removed. ]
Signed-off-by: Adrian Bunk &lt;bunk@stusta.de&gt;
[Bug fix only update]
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: update to 3.7.3</title>
<updated>2019-10-08T21:51:35+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2019-10-01T19:58:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d1a785686f30838d6ff2702a557d996f6cecfbc0'/>
<id>urn:sha1:d1a785686f30838d6ff2702a557d996f6cecfbc0</id>
<content type='text'>
License-update: copyright years

(From OE-Core rev: 845b9a4ed2b83d716688a7b0d8bf13f37e79a025)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
[ Backported patches removed. ]
Signed-off-by: Adrian Bunk &lt;bunk@stusta.de&gt;
[Bug fix only update]
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2019-9740</title>
<updated>2019-09-30T15:44:41+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2019-07-30T11:00:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=787ec750a21df3d712de2a92d7bd9349244e51f5'/>
<id>urn:sha1:787ec750a21df3d712de2a92d7bd9349244e51f5</id>
<content type='text'>
CVE-2019-9947 is same as CVE-2019-9740 and mark it as such. See:

https://bugs.python.org/issue30458

(From OE-Core rev: 86626171f5a8734c96e9b683f6fec5b779cd20e9)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: fix CVE-2019-9740</title>
<updated>2019-09-30T15:44:41+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2019-07-25T04:02:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d1c75cb7841974207bf6717dac426e77a12ee283'/>
<id>urn:sha1:d1c75cb7841974207bf6717dac426e77a12ee283</id>
<content type='text'>
(From OE-Core rev: 8eddac3305b7b428565103cde88cba444e3f0dd0)

(From OE-Core rev: feb8ba6821da5c5ccb7b3f9d71eb9f8859006d23)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python3: fix CVE-2018-20852 CVE-2019-9636</title>
<updated>2019-07-29T22:50:49+00:00</updated>
<author>
<name>Anuj Mittal</name>
<email>anuj.mittal@intel.com</email>
</author>
<published>2019-07-26T04:47:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9773b89a2f371acbe1e40d7cef6afb6c2a24f9c5'/>
<id>urn:sha1:9773b89a2f371acbe1e40d7cef6afb6c2a24f9c5</id>
<content type='text'>
(From OE-Core rev: eb415873caad54dbf332f9ebf5f3164da3459953)

Signed-off-by: Anuj Mittal &lt;anuj.mittal@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>python: add a fix for CVE-2019-9948 and CVE-2019-9636</title>
<updated>2019-06-07T12:57:48+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2019-05-17T20:16:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=511de9dc4788001f62e225c07f6bc859836ddf0f'/>
<id>urn:sha1:511de9dc4788001f62e225c07f6bc859836ddf0f</id>
<content type='text'>
(From OE-Core rev: 6c8994a6ae8860c4b27d8ec990344c6b099cc685)

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
