packages/lang/python/python3-version.mk, branch openwrt-18.06Community maintained packages for OpenWrthttp://x-nagi.com/cgit/packages/atom?h=openwrt-18.062021-09-08T21:12:03Zpython3: Update to 3.6.152021-09-08T21:12:03ZJeffery Tojeffery.to@gmail.com2021-09-08T14:47:24Zurn:sha1:1236ebb5051bcb4151d62c20fa001a1dc5178dde
Includes fix for CVE-2013-0340 ("Billion Laughs" vulnerability).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.142021-07-06T16:38:27ZJeffery Tojeffery.to@gmail.com2021-07-06T16:38:27Zurn:sha1:ea046789ec053c53827a39a084f4764e948ea8b3
Includes fix for CVE-2021-3426 (Information disclosure via pydoc).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.132021-02-22T12:28:45ZJeffery Tojeffery.to@gmail.com2021-02-22T12:28:45Zurn:sha1:52ae66045db40a6e6b266f7ddb2aa1af17cbb777
Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
as a query args separator
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.12, remove backported patches2020-10-16T16:39:17ZJeffery Tojeffery.to@gmail.com2020-10-16T16:39:17Zurn:sha1:5d988670ce3f932d977f82827f7adc4191689bc3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.112020-06-30T16:01:28ZJeffery Tojeffery.to@gmail.com2020-06-30T16:01:28Zurn:sha1:6417457339c0fac00e2a9013c34e5794120e9ae3
This contains a fix for CVE-2020-8492 (Denial of service in
urllib.request.AbstractBasicAuthHandler)[1].
[1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Updated to version 3.6.102019-12-21T17:12:34ZJosef Schlehoferpepe.schlehofer@gmail.com2019-12-21T12:50:01Zurn:sha1:29fe5f91d7143cfe949cec45c1653bc6dbcf6ea7
Remove backported patches:
025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch
026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch
Fixes CVE-2019-16056
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
python3-pip: fix install rule2019-10-08T07:48:19ZAlexandru Ardeleanardeleanalex@gmail.com2019-02-27T10:18:17Zurn:sha1:e84deea057f4b8e6898f08d91a9fcfa155d1a50a
This seems to have slipped for some time. No idea if it ever worked.
It could be that this worked at some point.
In any case, the shebang is properly updated now.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b96dc01715f4f03f758ff1d087caf15726016af)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(bump PKG_RELEASE for python3-pip)
python3: update to version 3.6.92019-07-22T08:17:35ZJosef Schlehoferpepe.schlehofer@gmail.com2019-07-22T08:06:48Zurn:sha1:ae21f4990d1a9acca982dc660be91f64782549c7
3.6.9 is the latest security fix release of Python 3.6.
- Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010
- Refreshed patches
- Removed a few backports patches
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
python/python3: fix .dist-info missing for setuptools and pip2018-12-22T19:28:02ZJeffery Tojeffery.to@gmail.com2018-12-22T14:16:52Zurn:sha1:e3f32b75b32dbe11958017ad77cf0b39e821728f
Without .dist-info (similar to .egg-info), setuptools and pip are not
discoverable by pkg_resources.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: update to version 3.6.52018-05-03T11:46:35ZAlexandru Ardeleanardeleanalex@gmail.com2018-05-03T11:46:30Zurn:sha1:b7d1d2149ee094ba3b530d5c168878c8198f286a
Add PKG_RELEASE for setuptools and pip.
Refresh all patches.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>