Commit Graph

11 Commits

Author SHA1 Message Date
Chen Qi
423d32dae2 python3: fix CVE-2019-16935
(From OE-Core rev: 78846c823cbb662897ce85b061a745c1dd7deeab)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-28 05:31:42 +00:00
Ross Burton
52fe6a79d9 python3: ensure that all forms of python3-config are in python3-dev
In multilib builds python3-config gets renamed to eg python3-config-lib64 but
this ends up being packaged in python3-core not python3-dev.

The manifest uses an extended glob to package all python* binaries that are not
python-config into python3-core:

            "${bindir}/python*[!-config]",

However, this doesn't do what was intended, as [] is a range match.

Replace the globs with more verbose but precise matches, and clear out
FILES_${PN} to ensure that new binaries don't end up in ${PN} (which shouldn't
exist).

[ YOCTO #13592 ]

(From OE-Core rev: c780f21c33b0684dafff3421600cd1c11ddd0c48)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23 16:30:35 +01:00
Ross Burton
4b467ed084 python3: alternative name is python3-config not python-config
With python3-config using the 'python-config' name, it's possible for
python-config to point at python3-config, which is obviously wrong.

(From OE-Core rev: 80a4a44d4d9da1cacda5f50ea955017502829c6d)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-23 16:30:35 +01:00
Chen Qi
4ac566250d python3: CVE-2019-16056
(From OE-Core rev: 328e3a1a3bb95cca60621f22cc500f9d24dbc590)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-15 14:16:10 +01:00
Alexander Kanavin
7bd7af037f python3: un-break disabling the readline PACKAGECONFIG
Previously the readline module would have been built regardless of
readline's presence in the sysroot, and the recipe would
fail at package_qa.

(From OE-Core rev: 79ebbca6943bc66b619671f93ac283ed2cfc8e5c)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-15 14:16:10 +01:00
Alexander Kanavin
0aee3558f9 python3: make gdbm optional
The use case is building a gpl3-free image, without having
to rely on outdated recipes from meta-gplv2 layer.

(From OE-Core rev: 02eb487c8145e0f3d957c39cf16f6f805e95e536)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-15 14:16:10 +01:00
Yi Zhao
c21d6a80f9 python: add tk-lib as runtime dependency for python-tkinter
Fixes:
ERROR: python-2.7.16-r0 do_package_qa: QA Issue:
/usr/lib/python2.7/lib-dynload/_tkinter.so contained in package
python-tkinter requires libtk8.6.so, but no providers found in
RDEPENDS_python-tkinter? [file-rdeps]

(From OE-Core rev: f78248a2380bbbbf271b5bb02c762f5bc7a3a92e)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-10-02 10:09:47 +01:00
Chen Qi
4349b933ad python3: make misc package rdepend on pydoc and pickle modules
The cgitb module in misc package requires pydoc. And the trace
module in misc package requires pickle.

(From OE-Core rev: f7f04c4436f414ab1e57e7fc93349ac77ecf37be)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-09-07 07:47:24 +01:00
Mingli Yu
cd86f35cf4 python3: fix the test_locale output format
Before this patch:
 # python3 -m test -v test_locale
 [snip]
 test_getsetlocale_issue1813 (test.test_locale.TestMiscellaneous) ... testing with ('tr_TR', 'ISO8859-9') ok
 [snip]

 After this patch:
 # python3 -m test -v test_locale
 [snip]
 test_getsetlocale_issue1813 (test.test_locale.TestMiscellaneous) ... testing with ('tr_TR', 'ISO8859-9')... ok
 [snip]

Make the test ended with "... ok" is common in python
unittest world, we should make it keep consistent
with other test cases in case it may be ignored to
record in the report if we use the common filter
"... ok".

[YOCTO #13298]

(From OE-Core rev: 4e698cf8f3a9c661f5b67c6001ad4d92b574d136)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-21 21:52:59 +01:00
Ross Burton
2e060e2df7 python3: support recommends in manifest
Add support for runtime recommends along with runtime depends to the manifest.

(From OE-Core rev: 16cc9a2ca559d978c6d0e648c18c297255b69dcc)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-08-03 23:56:01 +01:00
Anuj Mittal
edab4b2cec python3: upgrade 3.7.3 -> 3.7.4
Also fixes CVE-2019-9740, CVE-2019-9948. For details, see:

https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-4-final

(From OE-Core rev: 73579c846fe02fb14464869ed382faf8fe299636)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-17 19:25:02 +01:00