3 Commits

Include renames

Author	SHA1	Message	Date
Hetvi Thakar	6752204aad	python3-simpleeval: Fix CVE-2026-32640 ... Manually backport the three upstream security fixes for CVE-2026-32640 to the Scarthgap simpleeval 0.9.13 recipe [1][2][3]. Include the required unhashable-container correction [4], which prevents the recursive security checks from raising TypeError on legitimate list and tuple values. Harden the recursive callback-argument validation to inspect sets, frozensets, and dictionary keys, and safely handle cyclic containers. Add regression coverage for each of these cases. Do not include the separate generator/coroutine hardening or the optional performance follow-up. Omit the new ModuleWrapper API so this stable-branch fix adds no unrelated public feature. [1] https://github.com/danthedeckie/simpleeval/commit/9cb4a7b99498 [2] https://github.com/danthedeckie/simpleeval/commit/1654cbf02193 [3] https://github.com/danthedeckie/simpleeval/commit/cffa9f68cee5 [4] https://github.com/danthedeckie/simpleeval/commit/d1e4569db678 Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>	2026-09-01 06:57:22 +05:30
Tim Orling	22741a0874	python3-simpleeval: switch to pytest --automake ... * Also replace ${PYTHON_PN} with python3 Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>	2024-02-16 16:42:37 -08:00
Wang Mingyu	e8a22081a2	python3-simpleeval: upgrade 0.9.12 -> 0.9.13 ... Changelog: =========== Better handling of empty strings passed as input. Fix the shift safe number issue from 0.9.12 More minor pylint / etc fixes / cleanups (general code quality) separate .parse from #115 Allow setting up completely empty {} operators / functions ( #75 via #123 ) Add extra bit-ops from #87 Add @daxamin to contributors ? Version bump stuff. other readme tweaks star expressions, eg x = {"a": 1, "b": 2, **c} no-build.patch removed since it's included in 0.9.13 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>	2023-02-27 09:43:09 -08:00