]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
python3: upgrade 3.10.4 -> 3.10.7
authorTim Orling <ticotimo@gmail.com>
Tue, 11 Oct 2022 19:56:01 +0000 (12:56 -0700)
committerSteve Sakoman <steve@sakoman.com>
Thu, 13 Oct 2022 16:31:01 +0000 (06:31 -1000)
commit3efae85283b19fa1b30af7fed7fa89d7a50337db
tree8f4066b049e98fbd19869ef970c52976b8278867
parent5ed94b1d155a7d5597358a93c65dfe98ac07ea15
python3: upgrade 3.10.4 -> 3.10.7

Security and bug fixes.

Drop patch for gh-92036 which was merged in 3.10.5
Refresh 0017-setup.py-do-not-report-missing-dependencies-for-disa.pathc

Fixes:
* CVE-2020-10735
  https://nvd.nist.gov/vuln/detail/CVE-2020-10735
* CVE-2021-28861
  https://nvd.nist.gov/vuln/detail/CVE-2021-28861
* CVE-2018-25032
  https://nvd.nist.gov/vuln/detail/CVE-2018-25032

For a list of changes see:
https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-7-final
https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final
https://docs.python.org/3.10/whatsnew/changelog.html#python-3-10-6-final

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/python/python3/0001-gh-92036-Fix-gc_fini_untrack-GH-92037.patch [deleted file]
meta/recipes-devtools/python/python3/0017-setup.py-do-not-report-missing-dependencies-for-disa.patch
meta/recipes-devtools/python/python3_3.10.7.bb [moved from meta/recipes-devtools/python/python3_3.10.4.bb with 99% similarity]