mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 21:49:33 +02:00
7a6a4aa3b1
This patch applies the upstream fix as referenced in [2],
using the commit shown in [1].
[1] dd9f436a36
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-59890
(From OE-Core rev: 0c89d54002ed0411ea34a926ccb80c4b6e4d858c)
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
71 lines
2.1 KiB
BlitzBasic
71 lines
2.1 KiB
BlitzBasic
SUMMARY = "Download, build, install, upgrade, and uninstall Python packages"
|
|
HOMEPAGE = "https://pypi.org/project/setuptools"
|
|
SECTION = "devel/python"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=141643e11c48898150daa83802dbc65f"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
CVE_PRODUCT = "python3-setuptools python:setuptools"
|
|
|
|
SRC_URI:append:class-native = " file://0001-conditionally-do-not-fetch-code-by-easy_install.patch"
|
|
|
|
SRC_URI += " \
|
|
file://0001-_distutils-sysconfig.py-make-it-possible-to-substite.patch \
|
|
file://CVE-2024-6345.patch \
|
|
file://CVE-2025-47273-pre1.patch \
|
|
file://CVE-2025-47273.patch \
|
|
file://CVE-2026-59890.patch \
|
|
"
|
|
|
|
SRC_URI[sha256sum] = "5c0806c7d9af348e6dd3777b4f4dbb42c7ad85b190104837488eab9a7c945cf8"
|
|
|
|
do_install:append() {
|
|
# setuptools ships Windows launcher executables (cli*.exe, gui*.exe).
|
|
# Keep them only when building for a Windows (mingw) host.
|
|
case "${HOST_OS}" in
|
|
mingw32|mingw64) ;;
|
|
*) rm -f ${D}${PYTHON_SITEPACKAGES_DIR}/setuptools/*.exe ;;
|
|
esac
|
|
}
|
|
|
|
DEPENDS += "python3"
|
|
|
|
RDEPENDS:${PN} = "\
|
|
python3-compile \
|
|
python3-compression \
|
|
python3-ctypes \
|
|
python3-email \
|
|
python3-html \
|
|
python3-json \
|
|
python3-netserver \
|
|
python3-numbers \
|
|
python3-pickle \
|
|
python3-pkg-resources \
|
|
python3-pkgutil \
|
|
python3-plistlib \
|
|
python3-shell \
|
|
python3-stringold \
|
|
python3-threading \
|
|
python3-unittest \
|
|
python3-xml \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
|
|
# The pkg-resources module can be used by itself, without the package downloader
|
|
# and easy_install. Ship it in a separate package so that it can be used by
|
|
# minimal distributions.
|
|
PACKAGES =+ "python3-pkg-resources "
|
|
FILES:python3-pkg-resources = "${PYTHON_SITEPACKAGES_DIR}/pkg_resources/*"
|
|
RDEPENDS:python3-pkg-resources = "\
|
|
python3-compression \
|
|
python3-email \
|
|
python3-plistlib \
|
|
python3-pprint \
|
|
"
|
|
|
|
# This used to use the bootstrap install which didn't compile. Until we bump the
|
|
# tmpdir version we can't compile the native otherwise the sysroot unpack fails
|
|
INSTALL_WHEEL_COMPILE_BYTECODE:class-native = "--no-compile-bytecode"
|