mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
96afd71237
This patch applies the upstream 3.1.48 backport for CVE-2026-44243. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commits are referenced in [3] and [4]. [1]dbfa264764[2] https://nvd.nist.gov/vuln/detail/CVE-2026-44243 [3]25ba54dd3f[4]4af8463cca(From OE-Core rev: 0853d0c72e96a3c4e3a5329589a9aa151e2f2c46) Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
37 lines
1.2 KiB
BlitzBasic
37 lines
1.2 KiB
BlitzBasic
SUMMARY = "Python library used to interact with Git repositories"
|
|
DESCRIPTION = "GitPython provides object model read and write access to \
|
|
a git repository. Access repository information conveniently, alter the \
|
|
index directly, handle remotes, or go down to low-level object database \
|
|
access with big-files support."
|
|
HOMEPAGE = "http://github.com/gitpython-developers/GitPython"
|
|
SECTION = "devel/python"
|
|
LICENSE = "BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=5279a7ab369ba336989dcf2a107e5c8e"
|
|
|
|
PYPI_PACKAGE = "GitPython"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
SRC_URI += "file://CVE-2026-42284.patch \
|
|
file://CVE-2026-44243_p1.patch \
|
|
file://CVE-2026-44243_p2.patch \
|
|
"
|
|
SRC_URI[sha256sum] = "2d99869e0fef71a73cbd242528105af1d6c1b108c60dfabd994bf292f76c3ceb"
|
|
|
|
DEPENDS += " python3-gitdb"
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-datetime \
|
|
python3-gitdb \
|
|
python3-io \
|
|
python3-logging \
|
|
python3-math \
|
|
python3-netclient \
|
|
python3-stringold \
|
|
python3-unittest \
|
|
python3-unixadmin \
|
|
git \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|