<feed xmlns='http://www.w3.org/2005/Atom'>
<title>packages/lang/python/python3/patches/013-getbuildinfo-date-time-source-date-epoch.patch, branch openwrt-19.07</title>
<subtitle>Community maintained packages for OpenWrt</subtitle>
<id>http://x-nagi.com/cgit/packages/atom?h=openwrt-19.07</id>
<link rel='self' href='http://x-nagi.com/cgit/packages/atom?h=openwrt-19.07'/>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/'/>
<updated>2023-03-16T07:05:35Z</updated>
<entry>
<title>python3: Update to 3.7.16, refresh patches</title>
<updated>2023-03-16T07:05:35Z</updated>
<author>
<name>Jeffery To</name>
<email>jeffery.to@gmail.com</email>
</author>
<published>2023-03-16T07:05:35Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/commit/?id=509f4e2f838952bd0322597a9b677ead283c98d1'/>
<id>urn:sha1:509f4e2f838952bd0322597a9b677ead283c98d1</id>
<content type='text'>
Includes fixes:

* 3.7.14:
  * CVE-2020-10735: Prevent DoS by large int&lt;-&gt;str conversions
  * CVE-2021-28861: http.server: Open Redirection if the URL path starts with //

* 3.7.16:
  * CVE-2022-45061: Slow IDNA decoding with large strings
  * CVE-2022-37454: Buffer overflow in the _sha3 module
  * CVE-2015-20107: mailcap.findmatch: document shell command Injection danger in filename parameter

Signed-off-by: Jeffery To &lt;jeffery.to@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: Update to version 3.7.5</title>
<updated>2019-10-21T13:19:32Z</updated>
<author>
<name>Josef Schlehofer</name>
<email>pepe.schlehofer@gmail.com</email>
</author>
<published>2019-10-19T17:59:59Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/commit/?id=0882737b4a29984eb25c35df7a1c25c8686f774d'/>
<id>urn:sha1:0882737b4a29984eb25c35df7a1c25c8686f774d</id>
<content type='text'>
setuptools: Updated to version 41.2.0
pip: Updated to version 19.2.3

Removed patches:
- 017: code was refactored
- 02{5,6,7,8}: those patches were backported from upstream and they are
included in 3.7.5

Refreshed patches

Signed-off-by: Josef Schlehofer &lt;pepe.schlehofer@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: Update to version 3.7.4</title>
<updated>2019-07-10T08:16:47Z</updated>
<author>
<name>Josef Schlehofer</name>
<email>pepe.schlehofer@gmail.com</email>
</author>
<published>2019-07-09T18:56:33Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/commit/?id=34f8cf530daad480d1ae770dfa9214204e0a88fd'/>
<id>urn:sha1:34f8cf530daad480d1ae770dfa9214204e0a88fd</id>
<content type='text'>
- Update setuptools to 40.8.0
- Update pip to 19.0.3
- Refreshed patches
- Removed 4 patches (2 of them was included in 3.7.3 and other two are
included in this release)

Makefile python3:
- Move PKG_MAINTAINER above PKG_LICENSE

Signed-off-by: Josef Schlehofer &lt;pepe.schlehofer@gmail.com&gt;
(cherry-picked from ce769db0077f3ace8ef691cf33b827a10e0613a5)
</content>
</entry>
<entry>
<title>python3: Fix compilation with deprecated OpenSSL APIs</title>
<updated>2019-03-11T22:08:09Z</updated>
<author>
<name>Rosen Penev</name>
<email>rosenp@gmail.com</email>
</author>
<published>2018-11-19T00:08:28Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/commit/?id=3b935060e878f9a331e240e0b42bccc44b1232ab'/>
<id>urn:sha1:3b935060e878f9a331e240e0b42bccc44b1232ab</id>
<content type='text'>
Also refreshed patches.

Signed-off-by: Rosen Penev &lt;rosenp@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: update to python 3.7.0</title>
<updated>2018-07-11T04:34:54Z</updated>
<author>
<name>Martin Strobel</name>
<email>arctus@crza.de</email>
</author>
<published>2018-07-10T18:19:46Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/commit/?id=fe01c8fc0509d1d207c1b99d7999a254121049e1'/>
<id>urn:sha1:fe01c8fc0509d1d207c1b99d7999a254121049e1</id>
<content type='text'>
Fixes python3 host SSL build -&gt; host-pip can use https:// urls again.
Updates Pip to 10.0.1
rebased patches

Signed-off-by: Martin Strobel &lt;arctus@crza.de&gt;
</content>
</entry>
<entry>
<title>python,python3: honour the SOURCE_DATE_EPOCH for the build-info</title>
<updated>2018-01-08T13:32:47Z</updated>
<author>
<name>Alexandru Ardelean</name>
<email>ardeleanalex@gmail.com</email>
</author>
<published>2018-01-06T15:18:11Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/packages/commit/?id=c54b312043d4bb373d82c45c77e7a7ee48e9b0ac'/>
<id>urn:sha1:c54b312043d4bb373d82c45c77e7a7ee48e9b0ac</id>
<content type='text'>
The Modules/getbuildinfo.c allows the use of DATE and TIME
macros to be defined via CFLAGS.

These vars, control the build date &amp; time when the
interpreter is opened, and can be read via the
`platform._sys_version()` function.

So, a conversion from SOURCE_DATE_EPOCH to DATE &amp; TIME
is required at build-time.

This is especially needed for `platform._sys_version()`
to work.
The installation of pip seems to rely on this.

The logic has been adapted from:
 https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal#Makefile

Signed-off-by: Alexandru Ardelean &lt;ardeleanalex@gmail.com&gt;
</content>
</entry>
</feed>
