Commit Graph

4 Commits

Author SHA1 Message Date
Shunsuke Tokumoto
fa99b92b24 python3-setuptools: Add "python:setuptools" to CVE_PRODUCT
Since there are vulnerabilities that cannot be detected by the existing
CVE_PRODUCT, add "python:setuptools" to CVE_PRODUCT.

https://nvd.nist.gov/vuln/detail/CVE-2013-1633
https://nvd.nist.gov/vuln/detail/CVE-2022-40897

(From OE-Core rev: d06ce1ca98e5a192dd47af0fa243328aa6d87bff)

Signed-off-by: Shunsuke Tokumoto <s-tokumoto@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit aa1c8d97efc6640a1cffa2459d9b20ad1f7309b0)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-10-29 05:51:03 -07:00
Richard Purdie
23763df006 Revert "python3-setuptools: upgrade 72.1.0 -> 72.2.0"
This reverts commit 8fccef7a731f44e5d27653e06becb54cf770e5e5.

The patch causes problems for systems using ccache. Revert until this is fixed.

"Inherit ccache, build anything which uses python3-setuptools (e.g. python3-icu)."

(From OE-Core rev: a7dafda0303e52965010fc428d950e10ff1bb940)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-09-10 13:05:00 +01:00
Wang Mingyu
0f105ef27f python3-setuptools: upgrade 72.1.0 -> 72.2.0
Changelog:
- Support for Pathlike objects in data files and extensions
- native support for C++ compilers
- removed unused get_msvcr()

(From OE-Core rev: 8fccef7a731f44e5d27653e06becb54cf770e5e5)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-08-21 21:51:49 +01:00
Trevor Gamblin
0aac243aec python3-setuptools: upgrade 71.1.0 -> 72.1.0
Changelog (https://github.com/pypa/setuptools/blob/main/NEWS.rst#v7210):

Features
  - Restore the tests command and deprecate access to the module. (#4519) (#4520)

(From OE-Core rev: 8760d37e4b6275016a8dcdabc04dfb85185649b7)

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-08-13 09:29:15 +01:00