summaryrefslogtreecommitdiff
path: root/lang/python/python3/Makefile
Commit message (Collapse)AuthorAgeFilesLines
* python3: Update to 3.6.15Jeffery To2021-09-081-1/+1
| | | | | | Includes fix for CVE-2013-0340 ("Billion Laughs" vulnerability). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.14Jeffery To2021-07-071-1/+1
| | | | | | Includes fix for CVE-2021-3426 (Information disclosure via pydoc). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.13Jeffery To2021-02-221-2/+2
| | | | | | | | | Includes fixes for: * CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr * CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon as a query args separator Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: fix host compilation with clangRosen Penev2020-12-071-1/+1
| | | | | | | Matched rpath parameter with Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from commit b40c40151c2ac3dd11d908a0548ac97e6b5c8455)
* python3: Update to 3.6.12, remove backported patchesJeffery To2020-10-171-2/+2
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Backport security fixesJeffery To2020-07-201-1/+1
| | | | | | | | This backports fixes for security issues, including: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2019-20907: Infinite loop in the tarfile module Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.11Jeffery To2020-07-011-2/+2
| | | | | | | | | This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. [1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-openssl,python3-openssl: Add dependency on ca-bundleJeffery To2020-05-201-1/+1
| | | | | | | | | The ssl module assumes OpenSSL can load the default trust anchors (root CA certificates). From https://github.com/openwrt/packages/issues/12209 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Python3: Fix host build on OpenSUSEJan Kardell2020-05-201-1/+1
| | | | | | | | | | | | | | The linker option -rpath is required to find libs in staging_dir. Now it is included when building host modules. Without it the import test of the _ctypes and _uuid modules would fail. The _ctypes module uses libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7. It will also fail on LEAP 42.x, Fedora28 and 29 and future or old versions of Ubuntu. Fix needed in master and 18.06 branches. Signed-off-by: Jan Kardell <jan.kardell@telliq.com> (cherry picked from commit 6ade5a1e3adb189d062b707e2b8f731c9faab844)
* python3: Updated to version 3.6.10Josef Schlehofer2019-12-211-2/+2
| | | | | | | | | | Remove backported patches: 025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch 026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch Fixes CVE-2019-16056 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: backport three security patchesJosef Schlehofer2019-09-301-1/+1
| | | | | | | Fixes: CVE-2019-16935 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry-picked from commit 80def9e)
* python,python3: move shebang handle in install scriptAlexandru Ardelean2019-08-081-1/+1
| | | | | | | | | | | | This extends the Python[3] shebang fixup to all packages. Only Python scripts in `/usr/bin` will be handled at the moment. Later it may make sense to also cover executables in `/bin`, though typically Python executables shouldn't be placed there. Previously the shebang handling was only done for python[3]-pip & python[3]-setuptools. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: Fix ctypes.util.find_library()Jeffery To2019-07-221-1/+1
| | | | | | | | | | | | | | | Python's ctypes.util.find_library() function currently doesn't work for musl libraries/systems[1]. This adds a patch to fix this function, based on a patch from Alpine Linux[2]. Fixes #9448. [1]: https://bugs.python.org/issue21622 [2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: update to version 3.6.9Josef Schlehofer2019-07-221-2/+2
| | | | | | | | | | 3.6.9 is the latest security fix release of Python 3.6. - Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010 - Refreshed patches - Removed a few backports patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python,python3: Fix CVE-2019-9636 - urlsplit missing NFKC normalizationJeffery To2019-04-211-1/+1
| | | | | | | | | | These patches address issue: CVE-2019-9636: urlsplit does not handle NFKC normalization Link to Python issue: https://bugs.python.org/issue36216 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* [18.06] python3: fix [CVE-2018-20406]Alexandru Ardelean2019-02-131-1/+1
| | | | | | | | | | | | | | Link to Python bug: https://bugs.python.org/issue34656 Upstream commit: https://github.com/python/cpython/commit/71a9c65e74a70b6ed39adc4ba81d311ac1aa2acc OpenWrt 18.06 contains version Python 3.6.5, which doesn't contain this fix. Python 2.7 is not affected. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python/python3: Fix lib2to3 fixes searchJeffery To2019-01-131-1/+1
| | | | | | | This is the patch from c98b12d9a920ede376d1eaef0da0c0da9d26d6b3 (#7931), applied for both python 2 and 3. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: backport CVE-2018-14647 patch from upstream [18.06]Alexandru Ardelean2018-12-311-1/+1
| | | | | | | | | | | These patches are backports from Python 3.6 upstream. The security issue is described here: https://nvd.nist.gov/vuln/detail/CVE-2018-14647 The Python bug report: https://bugs.python.org/issue34623 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: update to version 3.6.5Alexandru Ardelean2018-05-031-2/+2
| | | | | | | Add PKG_RELEASE for setuptools and pip. Refresh all patches. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python/python3: remove zlib/host dependencyHauke Mehrtens2018-04-281-1/+1
| | | | | | | | zlib is now a host tool and the zlib/host package was removed. this dependency is not needed any more as there will always be a zlib host library. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* python,python3: remove `--with-system-ffi=no` config argAlexandru Ardelean2018-03-141-1/+0
| | | | | | | | | | | | | | | | | | | Report https://github.com/openwrt/packages/issues/5638 It was mentioned that this causes build failures on Mac OS X. The default behavior [in the setup.py script] is to check whether `--with-system-ffi` is present in the CONFIG_ARGS env var. However that back-fires a bit when `--with-system-ffi=no`, because the condition `not '--with-system-ffi' in sysconfig.get_config_var("CONFIG_ARGS")` evaluates to true. This is a small bug in the `setup.py` script, but it looks like the easiest/cleanest way to address it on our end is to just remove it entirely from the HOST_CONFIGURE_ARGS. At least that's how it looks like when testing on a Linux machine. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: limit underlinking behavior to linux platformsAlexandru Ardelean2018-03-141-1/+5
| | | | | | | | | | | | This change was introduced in commit 1c54e2b0fbe2e9a7d to address build issues on Ubuntu 12.04. However it was reported to cause issues on Mac OS X. Report: https://github.com/openwrt/packages/issues/5310 It was also reported that removing this on MacOS X fixes the issue. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: disable dependencies between python src packagesAlexandru Ardelean2018-01-161-2/+1
| | | | | | | Related to: https://github.com/openwrt/packages/issues/5424 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* Merge pull request #5360 from commodo/python_reproducibleHannu Nyman2018-01-141-1/+1
|\ | | | | python,python3: honour the SOURCE_DATE_EPOCH for the build-info
| * python,python3: honour the SOURCE_DATE_EPOCH for the build-infoAlexandru Ardelean2018-01-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Modules/getbuildinfo.c allows the use of DATE and TIME macros to be defined via CFLAGS. These vars, control the build date & time when the interpreter is opened, and can be read via the `platform._sys_version()` function. So, a conversion from SOURCE_DATE_EPOCH to DATE & TIME is required at build-time. This is especially needed for `platform._sys_version()` to work. The installation of pip seems to rely on this. The logic has been adapted from: https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal#Makefile Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | python,python3: export mk files outside of python package dirsAlexandru Ardelean2018-01-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since `lang/python` is it's own folder of Python packages (for both Python 2 & 3), and these build rules are needed in a lot of packages [especially Python packages], putting them here makes sense architecturally, to be shared. This also helps get rid of the `include_mk` construct which relies on OpenWrt core to provide, and seems like a broken design idea that has persisted for a while. Reason is: it requires that Python 2/3 be built to provide these mk files for other Python packages, which seems like a bad idea. Long-term, there could be an issue where some other feeds would require these mk files [e.g. telephony] for some Python packages. We'll see how we handle this a bit later. For now we limit this to this feed. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | python,python3: do not install .mk snippetsMatthias Schiffer2018-01-101-12/+0
|/ | | | | | | | | The .mk snippets are not really usable at the moment, as they cannot be considered for metadata collection (package DUMP) when included through include_mk. Python packages do not use include_mk anymore for this reason, so the install commands can be removed as well. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* python,python3: undo egg-info removalJeffery To2018-01-081-1/+1
| | | | | | | | | | This reverts commits 4333d1dcbfd67dde4ca7d08717bc345cc424fbf8 and 074d2863be48c1a9093fffcda91f7a328bc7d0cb, making Python packages discoverable again by pkg_resources. Fixes #5361. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python,python3: add zlib/host to HOST_BUILD_DEPENDS (ver 2)Alexandru Ardelean2018-01-021-2/+2
| | | | | | | | | | | | | | | This reverts commit 3c6d14021e62d68a7d9bdd4520b799c5c207fde1. ( which is a revert of commit c764f77dc1a62ce667b38520496ddb9bfaececab ) The initiall commit ( c764f77dc1a62ce667b38520496ddb9bfaececab ) was reverted, becase zlib did not have a host-build. Now it does: https://github.com/openwrt/openwrt/commit/cbe71649bc49ccc6ae96385482d0794c33336f68 So, now it should be good to put this in. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: bump to version 3.6.4Alexandru Ardelean2017-12-311-4/+2
| | | | | | | | | | | | | | | | Re-worked patch `003-do-not-run-distutils-tests.patch` to reduce patch-size. Removed `011-fix-ncursesw-definition-colisions.patch` it is fixed upstream. Refreshed with `make package/python3/refresh` Resetting PKG_RELEASE to 1. This variable was never used for pip3 & setuptools, since VERSION is specified in the package definitions. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: add support for SOURCE_DATE_EPOCH varAlexandru Ardelean2017-12-201-1/+1
| | | | | | | | | | | | | See: https://github.com/openwrt/packages/issues/5278 This should make Python & Python3 packages reproducible when building. In my local tests, I got the same sha256 for a sample .pyc file, so likely this is the solution that should address this. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* Revert "python,python3: add zlib/host to HOST_BUILD_DEPENDS"Hannu Nyman2017-12-161-2/+2
| | | | | | | | | | | This reverts commit c764f77dc1a62ce667b38520496ddb9bfaececab. The commit caused warnings to be displayed at make defconfig etc. WARNING: Makefile 'package/feeds/packages/python/python/Makefile' has a host build dependency on 'zlib/host' but 'package/libs/zlib/Makefile' does not implement a 'host' build type Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* python,python3: add zlib/host to HOST_BUILD_DEPENDSAlexandru Ardelean2017-12-131-2/+2
| | | | | | | | | | | | | | | | | This should fix the zlibmodule build on the host side. Usually, if zlib is not found, Python/Python3 builds fine without it, but there are some cases where the Python/Python3 interpreter on the host-side requires zlib to run. At the moment, zlib does not have a host-build. This should be available when this PR gets merged: https://github.com/lede-project/source/pull/1329 [ or a similar one that contains host-build support for zlib ]. In the meantime, this change can go into Python/Python3. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: define config option for bluetooth supportAlexandru Ardelean2017-12-101-5/+13
| | | | | | | | | | | | | | | | | | | | | | | | | It was reported via https://github.com/openwrt/packages/pull/5122#issuecomment-347395472 that if bluez-libs is selected as an installable package, then the error below will show up: ``` * satisfy_dependencies_for: Cannot satisfy the following dependencies for python-light: * bluez-libs * * opkg_install_cmd: Cannot install package python-light. ``` This looks like a limitation in the design of package deps, and maybe a misuse of conditional deps (i.e. PACKAGE_bluez-libs:bluez-libs). So, to fix this, an idea we're adding an extra symbol that enfoces installation of bluez-libs if selected. We also need to add a way to disable bluetooth build if PYTHON(3)_BLUETOOTH_SUPPORT is de-selected. Otherwise, bluetooth is installed and the socket module is broken due to linker errors. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: build bluetooth support if bluez-libs selectedAlexandru Ardelean2017-11-141-4/+7
| | | | | | | | | | | | | | | | This should hopefully fix the Python3 build on buildbot. For a while I assumed it may be a build-bot issue, but then looking through the packages repo [and finding the bluez package] it looks like, if you try to build all packages, Python3 detects the bluetooth headers installed by bluez. It looks like Python's bluetooth support was somewhat broken ; it was not detecting the <bluetooth/bluetooth.h> header, so a backport from Python3 to Python fixed that. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: apply PKG_FIXUP:=autoreconfAlexandru Ardelean2017-11-061-0/+1
| | | | | | | Should hopefully provide more consistent results across distros. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: bump to version 3.6.3Alexandru Ardelean2017-11-061-2/+2
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: package CGI componentMirko Vogt2017-10-311-1/+1
| | | | Signed-off-by: Mirko Vogt <mirko-openwrt@nanl.de>
* python,python3: add option to keep egg-info dirs for python packagesAlexandru Ardelean2017-10-031-1/+1
| | | | | | | That way some python packages can choose to keep their egg-info dirs, if they want to, or they're needed. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: fix install mk filenamesAlexandru Ardelean2017-09-151-5/+5
| | | | | | | | Copy + paste error. Seems I fixed it while testing but forgot to update PR with this. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: install mk files in both host build and InstallDev partAlexandru Ardelean2017-09-141-13/+13
| | | | | | | | | | | Not sure how it can happen that the files are not installed via the host build. Maybe some SDK-like build. Let's make sure they are installed via InstallDev rule too. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: upgrade to version 3.6.2Alexandru Ardelean2017-07-241-3/+4
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: drop PKG_MD5SUM fields ; will use only PKG_HASHAlexandru Ardelean2017-07-191-1/+0
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: remove multi-arch support, and /usr/local pathsAlexandru Ardelean2017-07-191-1/+1
| | | | | | | This should hopefully reduce weird behaviour caused by the host system. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: add dependency on CONFIG_PACKAGE_ symbols for setuptools & pipAlexandru Ardelean2017-07-031-0/+2
| | | | | | | | | | | | If you build python/python3 and later decide to build python(3)-setuptools and/or python(3)-pip, the build won't re-run without adding `CONFIG_PACKAGE_python(3)-setuptools` and `CONFIG_PACKAGE_python(3)-pip`. Seems to resolve issue: https://github.com/openwrt/packages/issues/4529 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: fix underlinking issues with lrt (clock_gettime())Alexandru Ardelean2017-07-031-0/+1
| | | | | | | | | | | | | | | | | Seems it's called underlinking that's happening only on Ubuntu 12.04 with libressl (that comes from LEDE's tools folder). Link here: https://ubuntuforums.org/showthread.php?t=1870586 I'm still reading about this a bit. Since I don't really get it. But applying that fix (as in the link) seems to fix compiling on Ubuntu 12.04, and tried also on 16.04 (to make sure). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: install mk files in the Host/Install phaseAlexandru Ardelean2017-06-291-8/+12
| | | | | | | | The Build/InstallDev rule is activated only for target builds. But if someone needs only the host Python, then these files need to be installed in this phase, and not Build/InstallDev Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: fix distutils path to package when using bytecodesAlexandru Ardelean2017-06-121-1/+1
| | | | | | | | | | | | | | | | If there is only Python bytecodes, then the __init__.py script will be concatenated, and the __init__.pyc as well. This is becase this bit `path = os.path.join(path, '__init__'+extension)` is iterated twice. This is a bug in Python3, also because we ship bytecodes instead of source code [ with Python & Python3 ]. Python is not affected. Reported-by: Mirko Vogt <mirko@nanl.de> Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3-pip: override Package/python3-pip/install ruleAlexandru Ardelean2017-05-191-1/+1
| | | | | | | | | | | | | | This is in essence fixes pip3. That means pip3 will ship without Python byte-codes for a while, until I'll find a better way to fix it. I couldn't think of a not-very hack-ish way of doing it. The only draw-back of this, will be that pip3 will run a bit slower ; but that should be ok for a while. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python packages: move all things python under lang/pythonAlexandru Ardelean2017-05-171-0/+305
I admit this may be be a bit aggressive, but the lang folder is getting cluttered/filled up with Python, PHP, Perl, Ruby, etc. packages. Makes sense to try to group them into per-lang folders. I took the Pythons. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
generated by cgit (git 2.46.0) at 2026-10-12 14:25:41 +0000