NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
49df508007
kumquat-buildroot/package/python-pyyaml/python-pyyaml.mk

21 lines
787 B
Makefile
Raw Normal View History

python-pyyaml: new package [Thomas: - use 'select' rather than 'depends on' for the yaml library dependency - add hash file. - add upstream URL in Config.in help text - rework commit title.] Signed-off-by: Geoffrey Ragot <geoffrey.ragot@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-26 14:12:17 +02:00
################################################################################
#
# python-pyyaml
#
################################################################################
package/python3-pyyaml: add special host variant Needed to build mongodb. Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-23 11:49:07 +01:00
# Please keep in sync package/python3-pyyaml/python3-pyyaml.mk
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-03-02 18:25:23 +01:00
PYTHON_PYYAML_VERSION = 5.4.1
python-pyyaml: new package [Thomas: - use 'select' rather than 'depends on' for the yaml library dependency - add hash file. - add upstream URL in Config.in help text - rework commit title.] Signed-off-by: Geoffrey Ragot <geoffrey.ragot@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-26 14:12:17 +02:00
PYTHON_PYYAML_SOURCE = PyYAML-$(PYTHON_PYYAML_VERSION).tar.gz
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-03-02 18:25:23 +01:00
PYTHON_PYYAML_SITE = https://files.pythonhosted.org/packages/a0/a4/d63f2d7597e1a4b55aa3b4d6c5b029991d3b824b5bd331af8d4ab1ed687d
package/python{3}-pyyaml: switch to setuptools Since version 5.4.0 pyyaml uses setuptools (see https://github.com/yaml/pyyaml/blob/master/CHANGES) Fixes: - http://autobuild.buildroot.net/results/bc36ae51a1e4d70c5fd2a3eb4b458aba4220f2dc Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-06 09:54:32 +01:00
PYTHON_PYYAML_SETUP_TYPE = setuptools
python-pyyaml: correct license name LICENSE file contains MIT license text and README file clearly mentions pyyaml is released under MIT license. Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-04-09 10:34:14 +02:00
PYTHON_PYYAML_LICENSE = MIT
python-pyyaml: new package [Thomas: - use 'select' rather than 'depends on' for the yaml library dependency - add hash file. - add upstream URL in Config.in help text - rework commit title.] Signed-off-by: Geoffrey Ragot <geoffrey.ragot@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-26 14:12:17 +02:00
PYTHON_PYYAML_LICENSE_FILES = LICENSE
package/python-pyyaml: add CPE variables cpe:2.3:a:pyyaml:pyyaml is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Apyyaml%3Apyyaml Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-03-02 18:25:22 +01:00
PYTHON_PYYAML_CPE_ID_VENDOR = pyyaml
PYTHON_PYYAML_CPE_ID_PRODUCT = pyyaml
python-pyyaml: new package [Thomas: - use 'select' rather than 'depends on' for the yaml library dependency - add hash file. - add upstream URL in Config.in help text - rework commit title.] Signed-off-by: Geoffrey Ragot <geoffrey.ragot@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-26 14:12:17 +02:00
PYTHON_PYYAML_DEPENDENCIES = libyaml
package/python-pyyaml: add host variant host-python-pyyaml is needed for mongodb 4.0.6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Peter: s/HOST_PYTHON/HOST_PYTHON_PYYAML/] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-02-10 15:26:17 +01:00
HOST_PYTHON_PYYAML_DEPENDENCIES = host-libyaml
python-pyyaml: new package [Thomas: - use 'select' rather than 'depends on' for the yaml library dependency - add hash file. - add upstream URL in Config.in help text - rework commit title.] Signed-off-by: Geoffrey Ragot <geoffrey.ragot@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-26 14:12:17 +02:00
$(eval $(python-package))
package/python-pyyaml: add host variant host-python-pyyaml is needed for mongodb 4.0.6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Peter: s/HOST_PYTHON/HOST_PYTHON_PYYAML/] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2019-02-10 15:26:17 +01:00
$(eval $(host-python-package))
Reference in New Issue Copy Permalink