This fails at build time:
ERROR: python3-3.10.15-r0 do_patch: Applying patch
'CVE-2024-8088.patch' on target directory
'/home/steve/builds/poky-contrib-kirkstone/build/tmp/work/core2-64-poky-linux/python3/3.10.15-r0/Python-3.10.15'
CmdError('quilt --quiltrc
/home/steve/builds/poky-contrib-kirkstone/build/tmp/work/core2-64-poky-linux/python3/3.10.15-r0/recipe-sysroot-native/etc/quiltrc
push', 0, 'stdout: Applying patch CVE-2024-8088.patch
patching file Lib/test/test_zipfile.py
Hunk #1 succeeded at 3331 with fuzz 2 (offset 51 lines).
patching file Lib/zipfile.py
Hunk #1 FAILED at 9.
Hunk #2 succeeded at 2188 (offset 6 lines).
1 out of 2 hunks FAILED -- rejects in file Lib/zipfile.py
Patch CVE-2024-8088.patch does not apply (enforce with -f)
stderr: ')
ERROR: Logfile of failure stored in:
/home/steve/builds/poky-contrib-kirkstone/build/tmp/work/core2-64-poky-linux/python3/3.10.15-r0/temp/log.do_patch.1201652
ERROR: Task
(/home/steve/builds/poky-contrib-kirkstone/meta/recipes-devtools/python/python3_3.10.15.bb:do_patch)
failed with exit code '1'
You'll need to remove the CVE patches that are no longer required.
Please send a V2
Thanks,
Steve
On Wed, Sep 11, 2024 at 11:42 PM dchellam via lists.openembedded.org
<Divya.Chellam=windriver....@lists.openembedded.org> wrote:
>
> From: Divya Chellam <divya.chel...@windriver.com>
>
> Includes security fixes for CVE-2024-7592, CVE-2024-4032, CVE-2024-8088
> CVE-2024-6232, CVE-2024-6923 and other bug fixes.
>
> Release Notes:
> https://www.python.org/downloads/release/python-31015/
>
> Signed-off-by: Divya Chellam <divya.chel...@windriver.com>
> ---
> .../python/{python3_3.10.14.bb => python3_3.10.15.bb} | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> rename meta/recipes-devtools/python/{python3_3.10.14.bb =>
> python3_3.10.15.bb} (99%)
>
> diff --git a/meta/recipes-devtools/python/python3_3.10.14.bb
> b/meta/recipes-devtools/python/python3_3.10.15.bb
> similarity index 99%
> rename from meta/recipes-devtools/python/python3_3.10.14.bb
> rename to meta/recipes-devtools/python/python3_3.10.15.bb
> index 14ab3f6155..e3b4dad180 100644
> --- a/meta/recipes-devtools/python/python3_3.10.14.bb
> +++ b/meta/recipes-devtools/python/python3_3.10.15.bb
> @@ -45,7 +45,7 @@ SRC_URI:append:class-native = " \
> file://12-distutils-prefix-is-inside-staging-area.patch \
> file://0001-Don-t-search-system-for-headers-libraries.patch \
> "
> -SRC_URI[sha256sum] =
> "9c50481faa8c2832329ba0fc8868d0a606a680fc4f60ec48d26ce8e076751fda"
> +SRC_URI[sha256sum] =
> "aab0950817735172601879872d937c1e4928a57c409ae02369ec3d91dccebe79"
>
> # exclude pre-releases for both python 2.x and 3.x
> UPSTREAM_CHECK_REGEX = "[Pp]ython-(?P<pver>\d+(\.\d+)+).tar"
> --
> 2.40.0
>
>
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#204486):
https://lists.openembedded.org/g/openembedded-core/message/204486
Mute This Topic: https://lists.openembedded.org/mt/108408659/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
