mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
7be1953871
This patch applies the upstream 3.1.49 backport for CVE-2026-44244. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commits are referenced in [3] and [4]. [1]b049a13105[2] https://nvd.nist.gov/vuln/detail/CVE-2026-44244 [3]c417af469f[4]8e24503b42(From OE-Core rev: 9aaa23d4f6c04049fcdb532f6a83c654e8e6e15d) Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
39 lines
1.3 KiB
BlitzBasic
39 lines
1.3 KiB
BlitzBasic
SUMMARY = "Python library used to interact with Git repositories"
|
|
DESCRIPTION = "GitPython provides object model read and write access to \
|
|
a git repository. Access repository information conveniently, alter the \
|
|
index directly, handle remotes, or go down to low-level object database \
|
|
access with big-files support."
|
|
HOMEPAGE = "http://github.com/gitpython-developers/GitPython"
|
|
SECTION = "devel/python"
|
|
LICENSE = "BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=5279a7ab369ba336989dcf2a107e5c8e"
|
|
|
|
PYPI_PACKAGE = "GitPython"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
SRC_URI += "file://CVE-2026-42284.patch \
|
|
file://CVE-2026-44243_p1.patch \
|
|
file://CVE-2026-44243_p2.patch \
|
|
file://CVE-2026-44244_p1.patch \
|
|
file://CVE-2026-44244_p2.patch \
|
|
"
|
|
SRC_URI[sha256sum] = "2d99869e0fef71a73cbd242528105af1d6c1b108c60dfabd994bf292f76c3ceb"
|
|
|
|
DEPENDS += " python3-gitdb"
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-datetime \
|
|
python3-gitdb \
|
|
python3-io \
|
|
python3-logging \
|
|
python3-math \
|
|
python3-netclient \
|
|
python3-stringold \
|
|
python3-unittest \
|
|
python3-unixadmin \
|
|
git \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|