mirror of
https://git.yoctoproject.org/poky
synced 2026-02-06 16:56:37 +01:00
Drop upstreamed patch and refresh remaining patches. * https://www.python.org/downloads/release/python-31017/ Security content in this release * gh-131809: Upgrade vendored expat to 2.7.1 * gh-80222: Folding of quoted string in display_name violates RFC * gh-121284: Invalid RFC 2047 address header after refolding with email.policy.default * gh-131261: Update libexpat to 2.7.0 * gh-105704: CVE-2025-0938 urlparse does not flag hostname containing [ or ] as incorrect * gh-119511: OOM vulnerability in the imaplib module * https://www.python.org/downloads/release/python-31018/ Security content in this release * gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330] [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed tarfile extraction filters (filter="data" and filter="tar") to be bypassed using crafted symlinks and hard links. * gh-133767: Fix use-after-free in the “unicode-escape” decoder with a non-“strict” error handler. * gh-128840: Short-circuit the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor denial-of-service. gh-133767 got meawhile CVE-2025-4516 assigned. (From OE-Core rev: 838a8b5ca148dfa6c6c2c76f1705d1e358a31648) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
50 lines
1.6 KiB
Diff
50 lines
1.6 KiB
Diff
From 788cd0464ee2b175493a0167ceee8c0045ce323c Mon Sep 17 00:00:00 2001
|
|
From: Alexander Kanavin <alex.kanavin@gmail.com>
|
|
Date: Sun, 16 Feb 2020 17:50:25 +0100
|
|
Subject: [PATCH] configure.ac, setup.py: do not add a curses include path from
|
|
the host
|
|
|
|
This leads to host contamination, and particularly can cause
|
|
curses modules to fail at runtime if the host curses is configured
|
|
differently to native curses (observed on current OpenSuse Tumbleweed
|
|
as dnf failures).
|
|
|
|
Upstream-Status: Inappropriate [oe-core specific]
|
|
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
|
|
|
|
---
|
|
configure.ac | 6 ------
|
|
setup.py | 2 --
|
|
2 files changed, 8 deletions(-)
|
|
|
|
diff --git a/configure.ac b/configure.ac
|
|
index e5e3df8..bfdd987 100644
|
|
--- a/configure.ac
|
|
+++ b/configure.ac
|
|
@@ -5097,12 +5097,6 @@ then
|
|
[Define if you have struct stat.st_mtimensec])
|
|
fi
|
|
|
|
-# first curses header check
|
|
-ac_save_cppflags="$CPPFLAGS"
|
|
-if test "$cross_compiling" = no; then
|
|
- CPPFLAGS="$CPPFLAGS -I/usr/include/ncursesw"
|
|
-fi
|
|
-
|
|
AC_CHECK_HEADERS(curses.h ncurses.h)
|
|
|
|
# On Solaris, term.h requires curses.h
|
|
diff --git a/setup.py b/setup.py
|
|
index 62f0e18..c190002 100644
|
|
--- a/setup.py
|
|
+++ b/setup.py
|
|
@@ -1173,8 +1173,6 @@ class PyBuildExt(build_ext):
|
|
panel_library = 'panel'
|
|
if curses_library == 'ncursesw':
|
|
curses_defines.append(('HAVE_NCURSESW', '1'))
|
|
- if not CROSS_COMPILING:
|
|
- curses_includes.append('/usr/include/ncursesw')
|
|
# Bug 1464056: If _curses.so links with ncursesw,
|
|
# _curses_panel.so must link with panelw.
|
|
panel_library = 'panelw'
|