Community maintained packages for OpenWrt http://x-nagi.com/cgit/packages/atom?h=openwrt-19.07 2023-03-16T07:05:35Z 2023-03-16T07:05:35Z Jeffery To jeffery.to@gmail.com 2023-03-16T07:05:35Z urn:sha1:509f4e2f838952bd0322597a9b677ead283c98d1 Includes fixes: * 3.7.14: * CVE-2020-10735: Prevent DoS by large int<->str conversions * CVE-2021-28861: http.server: Open Redirection if the URL path starts with // * 3.7.16: * CVE-2022-45061: Slow IDNA decoding with large strings * CVE-2022-37454: Buffer overflow in the _sha3 module * CVE-2015-20107: mailcap.findmatch: document shell command Injection danger in filename parameter Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2022-03-21T18:16:36Z Jeffery To jeffery.to@gmail.com 2022-03-21T18:16:36Z urn:sha1:3398ed29b0c09dcb5519e229ba25db30043d1566 Includes fixes for: * Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and CVE-2019-12900 * CVE-2022-26488: Escalation of privilege via Windows Installer Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2020-10-16T17:35:19Z Jeffery To jeffery.to@gmail.com 2020-10-16T17:35:19Z urn:sha1:acb77d5bebd2d44a21480655798c04f74f6f4d45 Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2020-07-08T09:12:33Z Jeffery To jeffery.to@gmail.com 2020-07-08T09:10:14Z urn:sha1:4b0c1f8714a65942f90d1fb922a81179a17ffc98 This lets the Python build process set _PYTHON_HOST_PLATFORM instead of forcing an explicit value. Also: * Save the target _PYTHON_HOST_PLATFORM value during Build/InstallDev for use when building target Python packages (in python3-package.mk). * Use the (mostly) default PYTHON_FOR_BUILD value, instead patch configure to remove the platform triplet from the sysconfigdata file name. * Remove the "CROSS_COMPILE=yes" make variable (there is no indication that this variable is necessary). * Force host pip to build packages from source instead of downloading binary wheels. Previously, host pip can download universal (platform-independent) wheels but not platform-specific wheels, because of the custom _PYTHON_HOST_PLATFORM value. (Packages that do not have universal wheels would be compiled from source.) With a correct _PYTHON_HOST_PLATFORM, host pip can install platform-specific wheels as well. However, the pre-built shared object (.so) files in these wheels will have the host's platform triplet in their file names. When target Python packages are built (using the target's _PYTHON_HOST_PLATFORM), Python will not use these shared object files. By forcing host pip to build packages from source, the built shared object files will not have the platform triplet in their file names. (Host Python has been patched to remove the platform triplet from file names.) This allows these packages to be used when building target Python packages. (The net effect of this complete change is that platform-dependent packages will continue to be compiled from source, while platform-independent packages will now also be compiled from source.) Fixes https://github.com/openwrt/packages/issues/12680. Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2020-06-30T13:20:18Z Jeffery To jeffery.to@gmail.com 2020-06-30T13:20:18Z urn:sha1:d78bdbd8ad91abca5bf1959b53a70e930440fba1 This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://docs.python.org/release/3.7.8/whatsnew/changelog.html#python-3-7-8-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2019-10-21T13:19:32Z Josef Schlehofer pepe.schlehofer@gmail.com 2019-10-19T17:59:59Z urn:sha1:0882737b4a29984eb25c35df7a1c25c8686f774d setuptools: Updated to version 41.2.0 pip: Updated to version 19.2.3 Removed patches: - 017: code was refactored - 02{5,6,7,8}: those patches were backported from upstream and they are included in 3.7.5 Refreshed patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> 2019-07-10T08:16:47Z Josef Schlehofer pepe.schlehofer@gmail.com 2019-07-09T18:56:33Z urn:sha1:34f8cf530daad480d1ae770dfa9214204e0a88fd - Update setuptools to 40.8.0 - Update pip to 19.0.3 - Refreshed patches - Removed 4 patches (2 of them was included in 3.7.3 and other two are included in this release) Makefile python3: - Move PKG_MAINTAINER above PKG_LICENSE Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry-picked from ce769db0077f3ace8ef691cf33b827a10e0613a5) 2019-03-11T22:08:09Z Rosen Penev rosenp@gmail.com 2018-11-19T00:08:28Z urn:sha1:3b935060e878f9a331e240e0b42bccc44b1232ab Also refreshed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com> 2018-07-11T04:34:54Z Martin Strobel arctus@crza.de 2018-07-10T18:19:46Z urn:sha1:fe01c8fc0509d1d207c1b99d7999a254121049e1 Fixes python3 host SSL build -> host-pip can use https:// urls again. Updates Pip to 10.0.1 rebased patches Signed-off-by: Martin Strobel <arctus@crza.de> 2018-05-03T11:46:35Z Alexandru Ardelean ardeleanalex@gmail.com 2018-05-03T11:46:30Z urn:sha1:b7d1d2149ee094ba3b530d5c168878c8198f286a Add PKG_RELEASE for setuptools and pip. Refresh all patches. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>