summaryrefslogtreecommitdiff
path: root/lang/python/python3-version.mk
Commit message (Collapse)AuthorAgeFilesLines
* python3: Update to 3.7.17Jeffery To2023-06-121-2/+2
| | | | | | | This includes an updated patch for pip, as the bundled pip was also updated with this release. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.16, refresh patchesJeffery To2023-03-161-1/+1
| | | | | | | | | | | | | | | Includes fixes: * 3.7.14: * CVE-2020-10735: Prevent DoS by large int<->str conversions * CVE-2021-28861: http.server: Open Redirection if the URL path starts with // * 3.7.16: * CVE-2022-45061: Slow IDNA decoding with large strings * CVE-2022-37454: Buffer overflow in the _sha3 module * CVE-2015-20107: mailcap.findmatch: document shell command Injection danger in filename parameter Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.13, refresh patchesJeffery To2022-03-221-2/+2
| | | | | | | | | Includes fixes for: * Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and CVE-2019-12900 * CVE-2022-26488: Escalation of privilege via Windows Installer Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: update to version 3.7.12Josef Schlehofer2021-09-081-1/+1
| | | | | | | Fixes: CVE-2013-0340 (Windows and MacOS only) and smtplib multiple CRLF injection Changelog: https://www.python.org/downloads/release/python-3712/ Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: update to version 3.7.11Josef Schlehofer2021-07-061-1/+1
| | | | | | Fixes: CVE-2021-3426 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: Update to 3.7.10, refresh patchesJeffery To2021-02-221-1/+1
| | | | | | | | | Includes fixes for: * CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr * CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon as a query args separator Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.9, refresh/remove backported patchesJeffery To2020-10-171-1/+1
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.8, refresh/rework patchesJeffery To2020-06-301-5/+5
| | | | | | | | | | | | This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://docs.python.org/release/3.7.8/whatsnew/changelog.html#python-3-7-8-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-setuptools: Fix error when installing from sourceJeffery To2020-05-211-1/+1
| | | | | | | | | | | | | | | | | | | | When a Python package is installed from source (i.e. using setup.py) into a custom location (with --home), setuptools may want to create a site.py file in the custom location. This file is created based on the source code of site-patch.py, a file bundled with setuptools. Because the normal OpenWrt setuptools package does not contain Python source code, this file is missing and the installation will end with an error. This copies site-patch.py to site-patch.py.txt so that it will be included in python3-setuptools, and patches setuptools to look for this file. See https://github.com/openwrt/packages/issues/12223 Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 70a7f736c5d6fb9ebec1acc8b3e8ca77704361bf)
* python3-pip: Fix error when installing packages that require compilationJeffery To2020-04-241-1/+1
| | | | | | | This addresses one of the issues raised in #11912. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 11bc05763d6cb351842a7bd55e736b601656a41a)
* python3: update to version 3.7.7Josef Schlehofer2020-03-141-1/+1
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: Updated to version 3.7.6Josef Schlehofer2019-12-211-1/+1
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: Update to version 3.7.5Josef Schlehofer2019-10-211-3/+3
| | | | | | | | | | | | | | setuptools: Updated to version 41.2.0 pip: Updated to version 19.2.3 Removed patches: - 017: code was refactored - 02{5,6,7,8}: those patches were backported from upstream and they are included in 3.7.5 Refreshed patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: Update to version 3.7.4Josef Schlehofer2019-07-101-5/+5
| | | | | | | | | | | | | | - Update setuptools to 40.8.0 - Update pip to 19.0.3 - Refreshed patches - Removed 4 patches (2 of them was included in 3.7.3 and other two are included in this release) Makefile python3: - Move PKG_MAINTAINER above PKG_LICENSE Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry-picked from ce769db0077f3ace8ef691cf33b827a10e0613a5)
* python-setuptools: Add reproducibility patches from DebianJeffery To2019-05-241-1/+1
| | | | | | | | | | | | | | | | | | This adds the ability to patch setuptools (and pip), and adds 3 reproducibility patches from Debian[1]. (003-PKG-INFO-output-reproducible.patch addresses the issue identified in #9039.) The patching is not perfect, in that the patches are applied to setuptools and pip after they have been installed, since they are installed from wheels which are already "precompiled". Also, patching for the host install cannot be updated in place, for example if a patch is added or removed. [1]: https://sources.debian.org/patches/python-setuptools/40.8.0-1/ Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-python3-pip: add LICENSE informationEneas U de Queiroz2019-05-211-1/+1
| | | | | | CVE id was left commented out as it is not handled by uscan. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* python-python3-setuptools: add LICENSE informationEneas U de Queiroz2019-05-211-1/+1
| | | | | | CVE id was left commented out as it is not handled by uscan. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* python3: Fix py3 pip and setuptools versionsDaniel F. Dickinson2019-01-021-4/+4
| | | | | | | The update to Python 3.7.2 missed updating pip and setuptools versions, so fix that. Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
* python3: bump to version 3.7.2Alexandru Ardelean2018-12-311-1/+1
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python/python3: fix .dist-info missing for setuptools and pipJeffery To2018-12-221-6/+2
| | | | | | | Without .dist-info (similar to .egg-info), setuptools and pip are not discoverable by pkg_resources. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: bump to version 3.7.1Alexandru Ardelean2018-11-021-1/+1
| | | | | | | | | | | | This change bumps Python3 version to 3.7.1. Patch `002-fix-implicit-dh-free-declaration.patch` is now included in upstream. This also fixes CVE-2018-1061. https://www.cvedetails.com/cve/CVE-2018-1061/ Compile & run-tested on x86. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: update to python 3.7.0Martin Strobel2018-07-111-3/+3
| | | | | | | | Fixes python3 host SSL build -> host-pip can use https:// urls again. Updates Pip to 10.0.1 rebased patches Signed-off-by: Martin Strobel <arctus@crza.de>
* python3: update to version 3.6.5Alexandru Ardelean2018-05-031-3/+9
| | | | | | | Add PKG_RELEASE for setuptools and pip. Refresh all patches. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: export mk files outside of python package dirsAlexandru Ardelean2018-01-101-0/+17
Since `lang/python` is it's own folder of Python packages (for both Python 2 & 3), and these build rules are needed in a lot of packages [especially Python packages], putting them here makes sense architecturally, to be shared. This also helps get rid of the `include_mk` construct which relies on OpenWrt core to provide, and seems like a broken design idea that has persisted for a while. Reason is: it requires that Python 2/3 be built to provide these mk files for other Python packages, which seems like a bad idea. Long-term, there could be an issue where some other feeds would require these mk files [e.g. telephony] for some Python packages. We'll see how we handle this a bit later. For now we limit this to this feed. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
generated by cgit (git 2.46.0) at 2026-10-12 12:20:05 +0000