mirror of
https://git.yoctoproject.org/poky
synced 2026-02-05 16:28:43 +01:00
fa99b92b24
Since there are vulnerabilities that cannot be detected by the existing CVE_PRODUCT, add "python:setuptools" to CVE_PRODUCT. https://nvd.nist.gov/vuln/detail/CVE-2013-1633 https://nvd.nist.gov/vuln/detail/CVE-2022-40897 (From OE-Core rev: d06ce1ca98e5a192dd47af0fa243328aa6d87bff) Signed-off-by: Shunsuke Tokumoto <s-tokumoto@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit aa1c8d97efc6640a1cffa2459d9b20ad1f7309b0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
58 lines
1.7 KiB
BlitzBasic
58 lines
1.7 KiB
BlitzBasic
SUMMARY = "Download, build, install, upgrade, and uninstall Python packages"
|
|
HOMEPAGE = "https://pypi.org/project/setuptools"
|
|
SECTION = "devel/python"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=141643e11c48898150daa83802dbc65f"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
CVE_PRODUCT = "python3-setuptools python:setuptools"
|
|
|
|
SRC_URI:append:class-native = " file://0001-conditionally-do-not-fetch-code-by-easy_install.patch"
|
|
|
|
SRC_URI += " \
|
|
file://0001-_distutils-sysconfig.py-make-it-possible-to-substite.patch"
|
|
|
|
SRC_URI[sha256sum] = "8d243eff56d095e5817f796ede6ae32941278f542e0f941867cc05ae52b162ec"
|
|
|
|
DEPENDS += "python3"
|
|
|
|
RDEPENDS:${PN} = "\
|
|
python3-compile \
|
|
python3-compression \
|
|
python3-ctypes \
|
|
python3-email \
|
|
python3-html \
|
|
python3-json \
|
|
python3-netserver \
|
|
python3-numbers \
|
|
python3-pickle \
|
|
python3-pkg-resources \
|
|
python3-pkgutil \
|
|
python3-plistlib \
|
|
python3-shell \
|
|
python3-stringold \
|
|
python3-threading \
|
|
python3-unittest \
|
|
python3-unixadmin \
|
|
python3-xml \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
|
|
# The pkg-resources module can be used by itself, without the package downloader
|
|
# and easy_install. Ship it in a separate package so that it can be used by
|
|
# minimal distributions.
|
|
PACKAGES =+ "python3-pkg-resources "
|
|
FILES:python3-pkg-resources = "${PYTHON_SITEPACKAGES_DIR}/pkg_resources/*"
|
|
RDEPENDS:python3-pkg-resources = "\
|
|
python3-compression \
|
|
python3-email \
|
|
python3-plistlib \
|
|
python3-pprint \
|
|
"
|
|
|
|
# This used to use the bootstrap install which didn't compile. Until we bump the
|
|
# tmpdir version we can't compile the native otherwise the sysroot unpack fails
|
|
INSTALL_WHEEL_COMPILE_BYTECODE:class-native = "--no-compile-bytecode"
|