NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
831a1bd299
kumquat-buildroot/package/python3-pyyaml/python3-pyyaml.mk

21 lines
831 B
Makefile
Raw Normal View History

package/python3-pyyaml: add special host variant Needed to build mongodb. Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-23 11:49:07 +01:00
################################################################################
#
# python3-pyyaml
#
################################################################################
# Please keep in sync with package/python-pyyaml/python-pyyaml.mk
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-03-02 18:25:23 +01:00
PYTHON3_PYYAML_VERSION = 5.4.1
package/python3-pyyaml: add special host variant Needed to build mongodb. Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-23 11:49:07 +01:00
PYTHON3_PYYAML_SOURCE = PyYAML-$(PYTHON3_PYYAML_VERSION).tar.gz
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-03-02 18:25:23 +01:00
PYTHON3_PYYAML_SITE = https://files.pythonhosted.org/packages/a0/a4/d63f2d7597e1a4b55aa3b4d6c5b029991d3b824b5bd331af8d4ab1ed687d
package/python3-pyyaml: add special host variant Needed to build mongodb. Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-23 11:49:07 +01:00
PYTHON3_PYYAML_SETUP_TYPE = distutils
PYTHON3_PYYAML_LICENSE = MIT
PYTHON3_PYYAML_LICENSE_FILES = LICENSE
package/python-pyyaml: add CPE variables cpe:2.3:a:pyyaml:pyyaml is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Apyyaml%3Apyyaml Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-03-02 18:25:22 +01:00
PYTHON3_PYYAML_CPE_ID_VENDOR = pyyaml
PYTHON3_PYYAML_CPE_ID_PRODUCT = pyyaml
package/python3-pyyaml: add special host variant Needed to build mongodb. Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-23 11:49:07 +01:00
HOST_PYTHON3_PYYAML_DL_SUBDIR = python-pyyaml
HOST_PYTHON3_PYYAML_NEEDS_HOST_PYTHON = python3
HOST_PYTHON3_PYYAML_DEPENDENCIES = host-libyaml
$(eval $(host-python-package))
Reference in New Issue Copy Permalink