summaryrefslogtreecommitdiff
path: root/lang/python/python3/patches
Commit message (Collapse)AuthorAgeFilesLines
* python3: Update to 3.6.12, remove backported patchesJeffery To2020-10-174-343/+0
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Backport security fixesJeffery To2020-07-204-0/+343
| | | | | | | | This backports fixes for security issues, including: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2019-20907: Infinite loop in the tarfile module Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Updated to version 3.6.10Josef Schlehofer2019-12-212-217/+0
| | | | | | | | | | Remove backported patches: 025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch 026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch Fixes CVE-2019-16056 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: fix CVE-2019-16056 and delete two patchesJosef Schlehofer2019-09-304-235/+155
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: backport three security patchesJosef Schlehofer2019-09-303-0/+297
| | | | | | | Fixes: CVE-2019-16935 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry-picked from commit 80def9e)
* python,python3: Fix ctypes.util.find_library()Jeffery To2019-07-221-0/+74
| | | | | | | | | | | | | | | Python's ctypes.util.find_library() function currently doesn't work for musl libraries/systems[1]. This adds a patch to fix this function, based on a patch from Alpine Linux[2]. Fixes #9448. [1]: https://bugs.python.org/issue21622 [2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: update to version 3.6.9Josef Schlehofer2019-07-2213-515/+15
| | | | | | | | | | 3.6.9 is the latest security fix release of Python 3.6. - Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010 - Refreshed patches - Removed a few backports patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python,python3: Fix CVE-2019-9636 - urlsplit missing NFKC normalizationJeffery To2019-04-211-0/+173
| | | | | | | | | | These patches address issue: CVE-2019-9636: urlsplit does not handle NFKC normalization Link to Python issue: https://bugs.python.org/issue36216 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* [18.06] python3: fix [CVE-2018-20406]Alexandru Ardelean2019-02-131-0/+206
| | | | | | | | | | | | | | Link to Python bug: https://bugs.python.org/issue34656 Upstream commit: https://github.com/python/cpython/commit/71a9c65e74a70b6ed39adc4ba81d311ac1aa2acc OpenWrt 18.06 contains version Python 3.6.5, which doesn't contain this fix. Python 2.7 is not affected. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python/python3: Fix lib2to3 fixes searchJeffery To2019-01-131-0/+17
| | | | | | | This is the patch from c98b12d9a920ede376d1eaef0da0c0da9d26d6b3 (#7931), applied for both python 2 and 3. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: backport CVE-2018-14647 patch from upstream [18.06]Alexandru Ardelean2018-12-312-0/+119
| | | | | | | | | | | These patches are backports from Python 3.6 upstream. The security issue is described here: https://nvd.nist.gov/vuln/detail/CVE-2018-14647 The Python bug report: https://bugs.python.org/issue34623 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: update to version 3.6.5Alexandru Ardelean2018-05-033-15/+6
| | | | | | | Add PKG_RELEASE for setuptools and pip. Refresh all patches. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: honour the SOURCE_DATE_EPOCH for the build-infoAlexandru Ardelean2018-01-081-0/+28
| | | | | | | | | | | | | | | | | | | | | The Modules/getbuildinfo.c allows the use of DATE and TIME macros to be defined via CFLAGS. These vars, control the build date & time when the interpreter is opened, and can be read via the `platform._sys_version()` function. So, a conversion from SOURCE_DATE_EPOCH to DATE & TIME is required at build-time. This is especially needed for `platform._sys_version()` to work. The installation of pip seems to rely on this. The logic has been adapted from: https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal#Makefile Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: bump to version 3.6.4Alexandru Ardelean2017-12-317-53/+17
| | | | | | | | | | | | | | | | Re-worked patch `003-do-not-run-distutils-tests.patch` to reduce patch-size. Removed `011-fix-ncursesw-definition-colisions.patch` it is fixed upstream. Refreshed with `make package/python3/refresh` Resetting PKG_RELEASE to 1. This variable was never used for pip3 & setuptools, since VERSION is specified in the package definitions. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: add support for SOURCE_DATE_EPOCH varAlexandru Ardelean2017-12-201-0/+13
| | | | | | | | | | | | | See: https://github.com/openwrt/packages/issues/5278 This should make Python & Python3 packages reproducible when building. In my local tests, I got the same sha256 for a sample .pyc file, so likely this is the solution that should address this. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: bump to version 3.6.3Alexandru Ardelean2017-11-062-25/+0
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: refresh patches `make package/python3/refresh` cmdAlexandru Ardelean2017-07-2612-57/+22
| | | | | | | | This was a bit overdue. I did not know about this methodology. Reduces patch fuzz. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: upgrade to version 3.6.2Alexandru Ardelean2017-07-241-5/+5
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: remove multi-arch support, and /usr/local pathsAlexandru Ardelean2017-07-192-12/+21
| | | | | | | This should hopefully reduce weird behaviour caused by the host system. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: fix distutils path to package when using bytecodesAlexandru Ardelean2017-06-121-0/+16
| | | | | | | | | | | | | | | | If there is only Python bytecodes, then the __init__.py script will be concatenated, and the __init__.pyc as well. This is becase this bit `path = os.path.join(path, '__init__'+extension)` is iterated twice. This is a bug in Python3, also because we ship bytecodes instead of source code [ with Python & Python3 ]. Python is not affected. Reported-by: Mirko Vogt <mirko@nanl.de> Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python packages: move all things python under lang/pythonAlexandru Ardelean2017-05-1711-0/+265
I admit this may be be a bit aggressive, but the lang folder is getting cluttered/filled up with Python, PHP, Perl, Ruby, etc. packages. Makes sense to try to group them into per-lang folders. I took the Pythons. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
generated by cgit (git 2.46.0) at 2026-10-12 21:09:22 +0000