summaryrefslogtreecommitdiff
path: root/lang/python/python3
Commit message (Collapse)AuthorAgeFilesLines
* python3: Update to 3.6.15Jeffery To2021-09-081-1/+1
| | | | | | Includes fix for CVE-2013-0340 ("Billion Laughs" vulnerability). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.14Jeffery To2021-07-071-1/+1
| | | | | | Includes fix for CVE-2021-3426 (Information disclosure via pydoc). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.13Jeffery To2021-02-221-2/+2
| | | | | | | | | Includes fixes for: * CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr * CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon as a query args separator Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: fix host compilation with clangRosen Penev2020-12-071-1/+1
| | | | | | | Matched rpath parameter with Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from commit b40c40151c2ac3dd11d908a0548ac97e6b5c8455)
* python3: Update to 3.6.12, remove backported patchesJeffery To2020-10-175-345/+2
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Backport security fixesJeffery To2020-07-205-1/+344
| | | | | | | | This backports fixes for security issues, including: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2019-20907: Infinite loop in the tarfile module Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.6.11Jeffery To2020-07-011-2/+2
| | | | | | | | | This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. [1]: https://docs.python.org/release/3.6.11/whatsnew/changelog.html#python-3-6-11-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-openssl,python3-openssl: Add dependency on ca-bundleJeffery To2020-05-202-2/+2
| | | | | | | | | The ssl module assumes OpenSSL can load the default trust anchors (root CA certificates). From https://github.com/openwrt/packages/issues/12209 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Python3: Fix host build on OpenSUSEJan Kardell2020-05-201-1/+1
| | | | | | | | | | | | | | The linker option -rpath is required to find libs in staging_dir. Now it is included when building host modules. Without it the import test of the _ctypes and _uuid modules would fail. The _ctypes module uses libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7. It will also fail on LEAP 42.x, Fedora28 and 29 and future or old versions of Ubuntu. Fix needed in master and 18.06 branches. Signed-off-by: Jan Kardell <jan.kardell@telliq.com> (cherry picked from commit 6ade5a1e3adb189d062b707e2b8f731c9faab844)
* python3: Updated to version 3.6.10Josef Schlehofer2019-12-213-219/+2
| | | | | | | | | | Remove backported patches: 025-bpo-34155-Dont-parse-domains-containing-GH-13079-GH-.patch 026-bpo-38243-xmlrpc.server-Escape-the-server_title-GH-1.patch Fixes CVE-2019-16056 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3-pip: fix install ruleAlexandru Ardelean2019-10-081-1/+1
| | | | | | | | | | | | This seems to have slipped for some time. No idea if it ever worked. It could be that this worked at some point. In any case, the shebang is properly updated now. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry-picked from commit 1b96dc01715f4f03f758ff1d087caf15726016af) Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (bump PKG_RELEASE for python3-pip)
* python3: fix CVE-2019-16056 and delete two patchesJosef Schlehofer2019-09-304-235/+155
| | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: backport three security patchesJosef Schlehofer2019-09-304-1/+298
| | | | | | | Fixes: CVE-2019-16935 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry-picked from commit 80def9e)
* python,python3: move shebang handle in install scriptAlexandru Ardelean2019-08-083-5/+1
| | | | | | | | | | | | This extends the Python[3] shebang fixup to all packages. Only Python scripts in `/usr/bin` will be handled at the moment. Later it may make sense to also cover executables in `/bin`, though typically Python executables shouldn't be placed there. Previously the shebang handling was only done for python[3]-pip & python[3]-setuptools. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: Fix ctypes.util.find_library()Jeffery To2019-07-222-1/+75
| | | | | | | | | | | | | | | Python's ctypes.util.find_library() function currently doesn't work for musl libraries/systems[1]. This adds a patch to fix this function, based on a patch from Alpine Linux[2]. Fixes #9448. [1]: https://bugs.python.org/issue21622 [2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: update to version 3.6.9Josef Schlehofer2019-07-2214-517/+17
| | | | | | | | | | 3.6.9 is the latest security fix release of Python 3.6. - Fixes: CVE-2018-20852, CVE-2019-9948, CVE-2019-9740, CVE-2019-5010 - Refreshed patches - Removed a few backports patches Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python,python3: Fix CVE-2019-9636 - urlsplit missing NFKC normalizationJeffery To2019-04-212-1/+174
| | | | | | | | | | These patches address issue: CVE-2019-9636: urlsplit does not handle NFKC normalization Link to Python issue: https://bugs.python.org/issue36216 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* [18.06] python3: fix [CVE-2018-20406]Alexandru Ardelean2019-02-132-1/+207
| | | | | | | | | | | | | | Link to Python bug: https://bugs.python.org/issue34656 Upstream commit: https://github.com/python/cpython/commit/71a9c65e74a70b6ed39adc4ba81d311ac1aa2acc OpenWrt 18.06 contains version Python 3.6.5, which doesn't contain this fix. Python 2.7 is not affected. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python/python3: Fix lib2to3 fixes searchJeffery To2019-01-132-1/+18
| | | | | | | This is the patch from c98b12d9a920ede376d1eaef0da0c0da9d26d6b3 (#7931), applied for both python 2 and 3. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #7757 from jefferyto/openwrt-18.06-python-dist-infoHannu Nyman2019-01-012-2/+4
|\ | | | | [openwrt-18.06] python/python3: fix .dist-info missing for setuptools and pip
| * python/python3: fix .dist-info missing for setuptools and pipJeffery To2018-12-232-2/+4
| | | | | | | | | | | | | | Without .dist-info (similar to .egg-info), setuptools and pip are not discoverable by pkg_resources. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python3: backport CVE-2018-14647 patch from upstream [18.06]Alexandru Ardelean2018-12-313-1/+120
|/ | | | | | | | | | | These patches are backports from Python 3.6 upstream. The security issue is described here: https://nvd.nist.gov/vuln/detail/CVE-2018-14647 The Python bug report: https://bugs.python.org/issue34623 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: update to version 3.6.5Alexandru Ardelean2018-05-034-17/+8
| | | | | | | Add PKG_RELEASE for setuptools and pip. Refresh all patches. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python/python3: remove zlib/host dependencyHauke Mehrtens2018-04-281-1/+1
| | | | | | | | zlib is now a host tool and the zlib/host package was removed. this dependency is not needed any more as there will always be a zlib host library. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* python,python3: remove `--with-system-ffi=no` config argAlexandru Ardelean2018-03-141-1/+0
| | | | | | | | | | | | | | | | | | | Report https://github.com/openwrt/packages/issues/5638 It was mentioned that this causes build failures on Mac OS X. The default behavior [in the setup.py script] is to check whether `--with-system-ffi` is present in the CONFIG_ARGS env var. However that back-fires a bit when `--with-system-ffi=no`, because the condition `not '--with-system-ffi' in sysconfig.get_config_var("CONFIG_ARGS")` evaluates to true. This is a small bug in the `setup.py` script, but it looks like the easiest/cleanest way to address it on our end is to just remove it entirely from the HOST_CONFIGURE_ARGS. At least that's how it looks like when testing on a Linux machine. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: limit underlinking behavior to linux platformsAlexandru Ardelean2018-03-141-1/+5
| | | | | | | | | | | | This change was introduced in commit 1c54e2b0fbe2e9a7d to address build issues on Ubuntu 12.04. However it was reported to cause issues on Mac OS X. Report: https://github.com/openwrt/packages/issues/5310 It was also reported that removing this on MacOS X fixes the issue. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: disable dependencies between python src packagesAlexandru Ardelean2018-01-161-2/+1
| | | | | | | Related to: https://github.com/openwrt/packages/issues/5424 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* Merge pull request #5360 from commodo/python_reproducibleHannu Nyman2018-01-142-1/+29
|\ | | | | python,python3: honour the SOURCE_DATE_EPOCH for the build-info
| * python,python3: honour the SOURCE_DATE_EPOCH for the build-infoAlexandru Ardelean2018-01-082-1/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Modules/getbuildinfo.c allows the use of DATE and TIME macros to be defined via CFLAGS. These vars, control the build date & time when the interpreter is opened, and can be read via the `platform._sys_version()` function. So, a conversion from SOURCE_DATE_EPOCH to DATE & TIME is required at build-time. This is especially needed for `platform._sys_version()` to work. The installation of pip seems to rely on this. The logic has been adapted from: https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal#Makefile Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | python,python3: export mk files outside of python package dirsAlexandru Ardelean2018-01-105-339/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since `lang/python` is it's own folder of Python packages (for both Python 2 & 3), and these build rules are needed in a lot of packages [especially Python packages], putting them here makes sense architecturally, to be shared. This also helps get rid of the `include_mk` construct which relies on OpenWrt core to provide, and seems like a broken design idea that has persisted for a while. Reason is: it requires that Python 2/3 be built to provide these mk files for other Python packages, which seems like a bad idea. Long-term, there could be an issue where some other feeds would require these mk files [e.g. telephony] for some Python packages. We'll see how we handle this a bit later. For now we limit this to this feed. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | python,python3: do not install .mk snippetsMatthias Schiffer2018-01-101-12/+0
|/ | | | | | | | | The .mk snippets are not really usable at the moment, as they cannot be considered for metadata collection (package DUMP) when included through include_mk. Python packages do not use include_mk anymore for this reason, so the install commands can be removed as well. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* python,python3: undo egg-info removalJeffery To2018-01-083-9/+1
| | | | | | | | | | This reverts commits 4333d1dcbfd67dde4ca7d08717bc345cc424fbf8 and 074d2863be48c1a9093fffcda91f7a328bc7d0cb, making Python packages discoverable again by pkg_resources. Fixes #5361. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python,python3: add zlib/host to HOST_BUILD_DEPENDS (ver 2)Alexandru Ardelean2018-01-021-2/+2
| | | | | | | | | | | | | | | This reverts commit 3c6d14021e62d68a7d9bdd4520b799c5c207fde1. ( which is a revert of commit c764f77dc1a62ce667b38520496ddb9bfaececab ) The initiall commit ( c764f77dc1a62ce667b38520496ddb9bfaececab ) was reverted, becase zlib did not have a host-build. Now it does: https://github.com/openwrt/openwrt/commit/cbe71649bc49ccc6ae96385482d0794c33336f68 So, now it should be good to put this in. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: bump to version 3.6.4Alexandru Ardelean2017-12-319-58/+20
| | | | | | | | | | | | | | | | Re-worked patch `003-do-not-run-distutils-tests.patch` to reduce patch-size. Removed `011-fix-ncursesw-definition-colisions.patch` it is fixed upstream. Refreshed with `make package/python3/refresh` Resetting PKG_RELEASE to 1. This variable was never used for pip3 & setuptools, since VERSION is specified in the package definitions. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: add support for SOURCE_DATE_EPOCH varAlexandru Ardelean2017-12-202-1/+14
| | | | | | | | | | | | | See: https://github.com/openwrt/packages/issues/5278 This should make Python & Python3 packages reproducible when building. In my local tests, I got the same sha256 for a sample .pyc file, so likely this is the solution that should address this. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* Revert "python,python3: add zlib/host to HOST_BUILD_DEPENDS"Hannu Nyman2017-12-161-2/+2
| | | | | | | | | | | This reverts commit c764f77dc1a62ce667b38520496ddb9bfaececab. The commit caused warnings to be displayed at make defconfig etc. WARNING: Makefile 'package/feeds/packages/python/python/Makefile' has a host build dependency on 'zlib/host' but 'package/libs/zlib/Makefile' does not implement a 'host' build type Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* python,python3: add zlib/host to HOST_BUILD_DEPENDSAlexandru Ardelean2017-12-131-2/+2
| | | | | | | | | | | | | | | | | This should fix the zlibmodule build on the host side. Usually, if zlib is not found, Python/Python3 builds fine without it, but there are some cases where the Python/Python3 interpreter on the host-side requires zlib to run. At the moment, zlib does not have a host-build. This should be available when this PR gets merged: https://github.com/lede-project/source/pull/1329 [ or a similar one that contains host-build support for zlib ]. In the meantime, this change can go into Python/Python3. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: define config option for bluetooth supportAlexandru Ardelean2017-12-102-5/+20
| | | | | | | | | | | | | | | | | | | | | | | | | It was reported via https://github.com/openwrt/packages/pull/5122#issuecomment-347395472 that if bluez-libs is selected as an installable package, then the error below will show up: ``` * satisfy_dependencies_for: Cannot satisfy the following dependencies for python-light: * bluez-libs * * opkg_install_cmd: Cannot install package python-light. ``` This looks like a limitation in the design of package deps, and maybe a misuse of conditional deps (i.e. PACKAGE_bluez-libs:bluez-libs). So, to fix this, an idea we're adding an extra symbol that enfoces installation of bluez-libs if selected. We also need to add a way to disable bluetooth build if PYTHON(3)_BLUETOOTH_SUPPORT is de-selected. Otherwise, bluetooth is installed and the socket module is broken due to linker errors. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: build bluetooth support if bluez-libs selectedAlexandru Ardelean2017-11-141-4/+7
| | | | | | | | | | | | | | | | This should hopefully fix the Python3 build on buildbot. For a while I assumed it may be a build-bot issue, but then looking through the packages repo [and finding the bluez package] it looks like, if you try to build all packages, Python3 detects the bluetooth headers installed by bluez. It looks like Python's bluetooth support was somewhat broken ; it was not detecting the <bluetooth/bluetooth.h> header, so a backport from Python3 to Python fixed that. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: apply PKG_FIXUP:=autoreconfAlexandru Ardelean2017-11-061-0/+1
| | | | | | | Should hopefully provide more consistent results across distros. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: bump to version 3.6.3Alexandru Ardelean2017-11-064-28/+3
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: package CGI componentMirko Vogt2017-10-312-1/+28
| | | | Signed-off-by: Mirko Vogt <mirko-openwrt@nanl.de>
* python,python3: add option to keep egg-info dirs for python packagesAlexandru Ardelean2017-10-033-2/+7
| | | | | | | That way some python packages can choose to keep their egg-info dirs, if they want to, or they're needed. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: fix install mk filenamesAlexandru Ardelean2017-09-151-5/+5
| | | | | | | | Copy + paste error. Seems I fixed it while testing but forgot to update PR with this. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: install mk files in both host build and InstallDev partAlexandru Ardelean2017-09-141-13/+13
| | | | | | | | | | | Not sure how it can happen that the files are not installed via the host build. Maybe some SDK-like build. Let's make sure they are installed via InstallDev rule too. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: add host-flags/settings to host pip install rulesAlexandru Ardelean2017-09-141-9/+15
| | | | | | | | | | The host pip install should have the host's CFLAGS, LDFLAGS, etc available. And not the target's flags. Otherwise, weird things can happen when installing packages (host-side) that need to build C code. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: fix opkg collisions with -src packagesAlexandru Ardelean2017-08-081-1/+1
| | | | | | | Fixes: https://github.com/openwrt/packages/issues/4681 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: refresh patches `make package/python3/refresh` cmdAlexandru Ardelean2017-07-2612-57/+22
| | | | | | | | This was a bit overdue. I did not know about this methodology. Reduces patch fuzz. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python3: upgrade to version 3.6.2Alexandru Ardelean2017-07-243-9/+10
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python,python3: add host python pip install supportAlexandru Ardelean2017-07-192-0/+16
| | | | | | | | | | | | | | To install Python packages host side, that may be needed for a build. The intent, is to try to reduce host-side Python packages being installed via LEDE/OpenWrt build system. Because those seem like a pain to maintain. The idea is adapted from Yousong's `python-packages` package. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
generated by cgit (git 2.46.0) at 2026-10-12 12:51:59 +0000