poky/meta/recipes-devtools/python/python3-zipp_3.7.0.bb
Hongxu Jia af06cbf82b python3-zipp: fix CVE-2024-5569
According to [1] which provided the fix link [2], but upstream author
reworked it later [3][4][5]

Backport and rebase all the patches for tracing

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-5569
[2] fd604bd34f
[3] 3cb5609002
[4] f89b93f037
[5] cc61e6140f

(From OE-Core rev: 13bd99e17f0aca108839e81e9aa0b14351116fdf)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-12-09 07:54:03 -08:00

27 lines
944 B
BlitzBasic

DESCRIPTION = "Backport of pathlib-compatible object wrapper for zip files"
HOMEPAGE = "https://github.com/jaraco/zipp"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=7a7126e068206290f3fe9f8d6c713ea6"
SRC_URI[sha256sum] = "9f50f446828eb9d45b267433fd3e9da8d801f614129124863f9c51ebceafb87d"
DEPENDS += "${PYTHON_PN}-setuptools-scm-native"
inherit pypi python_setuptools_build_meta
SRC_URI += " \
file://0001-Add-SanitizedNames-mixin.patch \
file://0002-Employ-SanitizedNames-in-CompleteDirs.-Fixes-broken-.patch \
file://0003-Removed-SanitizedNames.patch \
file://0004-Address-infinite-loop-when-zipfile-begins-with-more-.patch \
file://0005-Prefer-simpler-path.rstrip-to-consolidate-checks-for.patch \
"
DEPENDS += "${PYTHON_PN}-toml-native"
RDEPENDS:${PN} += "${PYTHON_PN}-compression \
${PYTHON_PN}-math \
${PYTHON_PN}-more-itertools"
BBCLASSEXTEND = "native nativesdk"