packages/lang/python/python3/patches, branch openwrt-18.06Community maintained packages for OpenWrthttp://x-nagi.com/cgit/packages/atom?h=openwrt-18.062020-10-16T16:39:17Zpython3: Update to 3.6.12, remove backported patches2020-10-16T16:39:17ZJeffery Tojeffery.to@gmail.com2020-10-16T16:39:17Zurn:sha1:5d988670ce3f932d977f82827f7adc4191689bc3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Backport security fixes2020-07-20T09:43:45ZJeffery Tojeffery.to@gmail.com2020-07-20T09:43:45Zurn:sha1:e05705fa54bffebe32133f52358f89bbeac504ac
This backports fixes for security issues, including:
* CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface
* CVE-2019-20907: Infinite loop in the tarfile module
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: Updated to version 3.6.102019-12-21T17:12:34ZJosef Schlehoferpepe.schlehofer@gmail.com2019-12-21T12:50:01Zurn:sha1:29fe5f91d7143cfe949cec45c1653bc6dbcf6ea7
Remove backported patches:
025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch
026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch
Fixes CVE-2019-16056
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
python3: fix CVE-2019-16056 and delete two patches2019-09-30T15:23:40ZJosef Schlehoferpepe.schlehofer@gmail.com2019-09-30T15:22:00Zurn:sha1:126cdd7c6b577840b078b6c7abd2d434a7c86312
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
python3: backport three security patches2019-09-30T08:03:35ZJosef Schlehoferpepe.schlehofer@gmail.com2019-09-28T23:11:44Zurn:sha1:0d9eeca453b573479660923217378957fd9ca0ed
Fixes: CVE-2019-16935
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
python,python3: Fix ctypes.util.find_library()2019-07-22T13:38:08ZJeffery Tojeffery.to@gmail.com2019-07-21T20:42:54Zurn:sha1:5cb4c348a7bff94b2611b56ea625bd8a4de08e45
Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].
This adds a patch to fix this function, based on a patch from Alpine
Linux[2].
Fixes #9448.
[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
python3: update to version 3.6.92019-07-22T08:17:35ZJosef Schlehoferpepe.schlehofer@gmail.com2019-07-22T08:06:48Zurn:sha1:ae21f4990d1a9acca982dc660be91f64782549c7
3.6.9 is the latest security fix release of Python 3.6.
- Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010
- Refreshed patches
- Removed a few backports patches
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
python,python3: Fix CVE-2019-9636 - urlsplit missing NFKC normalization2019-04-20T16:52:30ZJeffery Tojeffery.to@gmail.com2019-04-20T16:52:30Zurn:sha1:fbcac2d5322af167b8b864b09dd0616a30ad5a01
These patches address issue:
CVE-2019-9636: urlsplit does not handle NFKC normalization
Link to Python issue:
https://bugs.python.org/issue36216
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
[18.06] python3: fix [CVE-2018-20406]2019-02-13T08:27:22ZAlexandru Ardeleanardeleanalex@gmail.com2019-02-13T08:14:50Zurn:sha1:d0f5ae180cff25057dfd513293e6e164bf8fb0aa
Link to Python bug:
https://bugs.python.org/issue34656
Upstream commit:
https://github.com/python/cpython/commit/71a9c65e74a70b6ed39adc4ba81d311ac1aa2acc
OpenWrt 18.06 contains version Python 3.6.5, which doesn't contain this
fix.
Python 2.7 is not affected.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
python/python3: Fix lib2to3 fixes search2019-01-12T22:14:36ZJeffery Tojeffery.to@gmail.com2019-01-12T22:14:36Zurn:sha1:480e4d7e88b321f8b9e15901e52251a1296315dc
This is the patch from c98b12d9a920ede376d1eaef0da0c0da9d26d6b3 (#7931),
applied for both python 2 and 3.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>