mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
6c3ab4e59e
The pypi class default python:pyyaml vendor prefix matches nothing, so PyYAML CVEs are not evaluated at all. The databases use two vendor spellings: pyyaml in the NVD CPEs, and "Red Hat" (with a space, not expressible as a vendor:product pair) in CVE-2020-1747's CNA record. Use the bare product name to cover both. All four existing CVEs (CVE-2017-18342, CVE-2019-20477, CVE-2020-1747, CVE-2020-14343) are fixed by 5.4, so they resolve as not affected at 6.0.1. Note: Original commit was for python3-pyyaml_6.0.3.bb. This is adjusted for scarthgap where recipe version is python3-pyyaml_6.0.1.bb. (From OE-Core rev: 666e25c1fe1347da307726afd87554ffc080ed12) Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 89a0ba3c2da2a7755bafb28afbf75dc7112e2549) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
43 lines
1.1 KiB
BlitzBasic
43 lines
1.1 KiB
BlitzBasic
SUMMARY = "Python support for YAML"
|
|
DEPENDS += "libyaml python3-cython-native"
|
|
HOMEPAGE = "https://pyyaml.org/"
|
|
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=6d8242660a8371add5fe547adf083079"
|
|
|
|
PYPI_PACKAGE = "PyYAML"
|
|
|
|
CVE_PRODUCT = "pyyaml"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
SRC_URI += "file://0001-Fix-builds-with-Cython-3.patch"
|
|
SRC_URI[sha256sum] = "bfdf460b1736c775f2ba9f6a92bca30bc2095067b8a9d77876d1fad6cc3b4a43"
|
|
|
|
PACKAGECONFIG ?= "libyaml"
|
|
PACKAGECONFIG[libyaml] = "--with-libyaml,--without-libyaml,libyaml"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-datetime \
|
|
python3-netclient \
|
|
"
|
|
|
|
inherit ptest
|
|
SRC_URI += "\
|
|
https://raw.githubusercontent.com/yaml/pyyaml/a98fd6088e81d7aca571220c966bbfe2ac43c335/tests/test_dump_load.py;name=test \
|
|
file://run-ptest \
|
|
"
|
|
SRC_URI[test.sha256sum] = "b6a8a2825d89fdc8aee226560f66b8196e872012a0ea7118cbef1a832359434a"
|
|
|
|
RDEPENDS:${PN}-ptest += " \
|
|
python3-pytest \
|
|
python3-unittest-automake-output \
|
|
"
|
|
|
|
do_install_ptest() {
|
|
install -d ${D}${PTEST_PATH}/tests
|
|
cp -rf ${WORKDIR}/test_dump_load.py ${D}${PTEST_PATH}/tests/
|
|
}
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|