mirror of
https://git.yoctoproject.org/poky
synced 2026-09-16 18:49:34 +02:00
9c548130d4
Recipe (PV): python3-click (8.1.7) Before -> After python:click -> palletsprojects:click Newly caught: CVE-2026-7246 (command injection in click.edit()) Status: unpatched (fixed 8.3.3) Note: The original commit targeted python3-click_8.4.2.bb. This is adjusted for Scarthgap, where the recipe version is 8.1.7. The unrelated DESCRIPTION cleanup from the original commit is intentionally omitted. AI-Generated: Claude Sonnet 5 (From OE-Core rev: 0aa95f67c7e0363b59faa9d9bb60ee7c2d09b137) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 30357a26d7ce490725d1b0ac3375047d00595a5c) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
42 lines
1.1 KiB
BlitzBasic
42 lines
1.1 KiB
BlitzBasic
SUMMARY = "A simple wrapper around optparse for powerful command line utilities."
|
|
DESCRIPTION = "\
|
|
Click is a Python package for creating beautiful command line interfaces \
|
|
in a composable way with as little code as necessary. It's the "Command \
|
|
Line Interface Creation Kit". It's highly configurable but comes with \
|
|
sensible defaults out of the box."
|
|
HOMEPAGE = "http://click.pocoo.org/"
|
|
LICENSE = "BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=1fa98232fd645608937a0fdc82e999b8"
|
|
|
|
SRC_URI[sha256sum] = "ca9853ad459e787e2192211578cc907e7594e294c7ccc834310722b41b9ca6de"
|
|
|
|
inherit pypi setuptools3 ptest
|
|
|
|
SRC_URI += "file://run-ptest"
|
|
|
|
CVE_PRODUCT = "palletsprojects:click"
|
|
|
|
RDEPENDS:${PN}-ptest += " \
|
|
python3-pytest \
|
|
python3-terminal \
|
|
python3-unixadmin \
|
|
"
|
|
|
|
do_install_ptest() {
|
|
install -d ${D}${PTEST_PATH}/tests
|
|
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
|
|
cp -rf ${S}/setup.cfg ${D}${PTEST_PATH}/
|
|
cp -rf ${S}/docs ${D}${PTEST_PATH}/
|
|
}
|
|
|
|
UPSTREAM_CHECK_REGEX = "click/(?P<pver>\d+(\.\d+)+)/"
|
|
|
|
CLEANBROKEN = "1"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-io \
|
|
python3-threading \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|