packages/lang/python/python3/Makefile, branch openwrt-18.06Community maintained packages for OpenWrthttp://x-nagi.com/cgit/packages/atom?h=openwrt-18.062021-09-08T21:12:03Zpython3: Update to 3.6.152021-09-08T21:12:03ZJeffery Tojeffery.to@gmail.com2021-09-08T14:47:24Zurn:sha1:1236ebb5051bcb4151d62c20fa001a1dc5178dde
Includes fix for CVE-2013-0340 ("Billion Laughs" vulnerability).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.142021-07-06T16:38:27ZJeffery Tojeffery.to@gmail.com2021-07-06T16:38:27Zurn:sha1:ea046789ec053c53827a39a084f4764e948ea8b3
Includes fix for CVE-2021-3426 (Information disclosure via pydoc).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.132021-02-22T12:28:45ZJeffery Tojeffery.to@gmail.com2021-02-22T12:28:45Zurn:sha1:52ae66045db40a6e6b266f7ddb2aa1af17cbb777
Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
as a query args separator
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: fix host compilation with clang2020-12-07T23:50:44ZRosen Penevrosenp@gmail.com2020-08-01T20:59:57Zurn:sha1:4f4f708542318294e328afe52d30704137ef96c1
Matched rpath parameter with Makefile.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from commit b40c40151c2ac3dd11d908a0548ac97e6b5c8455)
python3: Update to 3.6.12, remove backported patches2020-10-16T16:39:17ZJeffery Tojeffery.to@gmail.com2020-10-16T16:39:17Zurn:sha1:5d988670ce3f932d977f82827f7adc4191689bc3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Backport security fixes2020-07-20T09:43:45ZJeffery Tojeffery.to@gmail.com2020-07-20T09:43:45Zurn:sha1:e05705fa54bffebe32133f52358f89bbeac504ac
This backports fixes for security issues, including:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2019-20907: Infinite loop in the tarfile module
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Update to 3.6.112020-06-30T16:01:28ZJeffery Tojeffery.to@gmail.com2020-06-30T16:01:28Zurn:sha1:6417457339c0fac00e2a9013c34e5794120e9ae3
This contains a fix for CVE-2020-8492 (Denial of service in
urllib.request.AbstractBasicAuthHandler)[1].
[1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python-openssl,python3-openssl: Add dependency on ca-bundle2020-05-20T09:28:02ZJeffery Tojeffery.to@gmail.com2020-05-20T07:46:59Zurn:sha1:76a67189c5f1c934144a462d8a88f2aa7d57dcfb
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).
From https://github.com/openwrt/packages/issues/12209
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Python3: Fix host build on OpenSUSE2020-05-20T09:28:02ZJan Kardelljan.kardell@telliq.com2018-10-01T17:13:44Zurn:sha1:618771c3a3305df9bc925fbf1ff0f43757262c69
The linker option -rpath is required to find libs in staging_dir. Now it
is included when building host modules. Without it the import test of
the _ctypes and _uuid modules would fail. The _ctypes module uses
libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7.
It will also fail on LEAP 42.x, Fedora28 and 29 and future or old
versions of Ubuntu.
Fix needed in master and 18.06 branches.
Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
(cherry picked from commit 6ade5a1e3adb189d062b707e2b8f731c9faab844)
python3: Updated to version 3.6.102019-12-21T17:12:34ZJosef Schlehoferpepe.schlehofer@gmail.com2019-12-21T12:50:01Zurn:sha1:29fe5f91d7143cfe949cec45c1653bc6dbcf6ea7
Remove backported patches:
025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch
026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch
Fixes CVE-2019-16056
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>