summaryrefslogtreecommitdiff
path: root/lang/python/python3-version.mk
Commit message (Collapse)AuthorAgeFilesLines
* python3: Update to 3.6.15Jeffery To2021-09-081-1/+1
| | | | | | Includes fix for CVE-2013-0340 ("Billion Laughs" vulnerability). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.14Jeffery To2021-07-071-1/+1
| | | | | | Includes fix for CVE-2021-3426 (Information disclosure via pydoc). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.13Jeffery To2021-02-221-1/+1
| | | | | | | | | Includes fixes for: * CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr * CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon as a query args separator Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.12, remove backported patchesJeffery To2020-10-171-1/+1
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.11Jeffery To2020-07-011-1/+1
| | | | | | | | | This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. [1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Updated to version 3.6.10Josef Schlehofer2019-12-211-1/+1
| | | | | | | | | | Remove backported patches: 025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch 026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch Fixes CVE-2019-16056 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3-pip: fix install ruleAlexandru Ardelean2019-10-081-1/+1
| | | | | | | | | | | | This seems to have slipped for some time. No idea if it ever worked. It could be that this worked at some point. In any case, the shebang is properly updated now. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry-picked from commit 1b96dc01715f4f03f758ff1d087caf15726016af) Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (bump PKG_RELEASE for python3-pip)
* python3: update to version 3.6.9Josef Schlehofer2019-07-221-5/+5
| | | | | | | | | | 3.6.9 is the latest security fix release of Python 3.6. - Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010 - Refreshed patches - Removed a few backports patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python/python3: fix .dist-info missing for setuptools and pipJeffery To2018-12-231-6/+2
| | | | | | | Without .dist-info (similar to .egg-info), setuptools and pip are not discoverable by pkg_resources. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: update to version 3.6.5Alexandru Ardelean2018-05-031-3/+9
| | | | | | | Add PKG_RELEASE for setuptools and pip. Refresh all patches. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: export mk files outside of python package dirsAlexandru Ardelean2018-01-101-0/+17
Since `lang/python` is it's own folder of Python packages (for both Python 2 & 3), and these build rules are needed in a lot of packages [especially Python packages], putting them here makes sense architecturally, to be shared. This also helps get rid of the `include_mk` construct which relies on OpenWrt core to provide, and seems like a broken design idea that has persisted for a while. Reason is: it requires that Python 2/3 be built to provide these mk files for other Python packages, which seems like a bad idea. Long-term, there could be an issue where some other feeds would require these mk files [e.g. telephony] for some Python packages. We'll see how we handle this a bit later. For now we limit this to this feed. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>