mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-05 02:57:19 +00:00
Ankur Tyagi
f311c7bdfc
Release Notes:
https://docs.djangoproject.com/en/dev/releases/5.2.17/
CVE: CVE-2026-15307 CVE-2026-15337 CVE-2026-15830 CVE-2026-15920
Backport Changes:
- Django 5.2.17 requires setuptools >= 83, the first
upstream release containing the fix [1]. Wrynose provides
setuptools 82.0.1 with that fix backported, so retain the
previous build requirement.
[1] https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 8a4bf31e7f)
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
29 lines
976 B
Diff
29 lines
976 B
Diff
From 7a05df92b0820675803a5e8e73d20b9453538d68 Mon Sep 17 00:00:00 2001
|
|
From: Darsh Kelaiya <dkelaiya@cisco.com>
|
|
Date: Fri, 21 Aug 2026 00:20:00 -0700
|
|
Subject: [PATCH] pyproject.toml: lower setuptools requirement for Wrynose
|
|
|
|
Django 5.2.17 requires setuptools >= 83, the first upstream release
|
|
containing the fix for [1]. Wrynose provides setuptools 82.0.1
|
|
with upstream commit dd9f436 backported, so retain the previous build
|
|
requirement.
|
|
|
|
[1] https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c
|
|
|
|
Upstream-Status: Inappropriate [Wrynose-specific toolchain compatibility]
|
|
|
|
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
|
|
---
|
|
pyproject.toml | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/pyproject.toml b/pyproject.toml
|
|
index b2327d6..e2d8244 100644
|
|
--- a/pyproject.toml
|
|
+++ b/pyproject.toml
|
|
@@ -1,3 +1,3 @@
|
|
[build-system]
|
|
-requires = ["setuptools>=83"]
|
|
+requires = ["setuptools>=77.0.3"]
|
|
build-backend = "setuptools.build_meta"
|