summaryrefslogtreecommitdiff
path: root/lang/python
Commit message (Collapse)AuthorAgeFilesLines
* python3: Update to 3.7.17Jeffery To2023-06-124-23/+23
| | | | | | | This includes an updated patch for pip, as the bundled pip was also updated with this release. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.16, refresh patchesJeffery To2023-03-166-9/+9
| | | | | | | | | | | | | | | Includes fixes: * 3.7.14: * CVE-2020-10735: Prevent DoS by large int<->str conversions * CVE-2021-28861: http.server: Open Redirection if the URL path starts with // * 3.7.16: * CVE-2022-45061: Slow IDNA decoding with large strings * CVE-2022-37454: Buffer overflow in the _sha3 module * CVE-2015-20107: mailcap.findmatch: document shell command Injection danger in filename parameter Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.13, refresh patchesJeffery To2022-03-227-17/+15
| | | | | | | | | Includes fixes for: * Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and CVE-2019-12900 * CVE-2022-26488: Escalation of privilege via Windows Installer Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-dateutil: Add missing HOST_PYTHON3_PACKAGE_BUILD_DEPENDSJeffery To2021-10-171-0/+1
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-importlib-metadata: Pin setuptools-scm versionJeffery To2021-10-171-1/+1
| | | | | | | | While a pinned/working version of setuptools-scm is installed (by python-zipp) by the time this package is compiled, pinning the version in this package is still the correct thing to do. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-zipp: pin setuptools-scm versionJosef Schlehofer2021-10-131-1/+1
| | | | | | | | The recent version of setuptools-scm depends on tomli, which has some build issues. Older one works. Suggested-by: Jeffery To <jeffery.to@gmail.com> Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python3: update to version 3.7.12Josef Schlehofer2021-09-082-2/+2
| | | | | | | Fixes: CVE-2013-0340 (Windows and MacOS only) and smtplib multiple CRLF injection Changelog: https://www.python.org/downloads/release/python-3712/ Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* click: update to version 7.0Josef Schlehofer2021-09-051-12/+12
| | | | | | | | | | - Change URL of the website and for PKG_SOURCE_URL - Change TITLE and description - Remove PKG_BUILD_DEPENDS, PKG_UNPACK as they are not necessary - Add src package Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 25e8b2cda2efda171929a33b9d52dbf108ca67b7)
* Merge pull request #16051 from BKPepe/openwrt-19.07Josef Schlehofer2021-07-062-2/+2
|\ | | | | python3: update to version 3.7.11
| * python3: update to version 3.7.11Josef Schlehofer2021-07-062-2/+2
| | | | | | | | | | | | Fixes: CVE-2021-3426 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | python-dateutil: pin setuptools-scm version to 5.0.2Alexandru Ardelean2021-06-301-1/+3
| | | | | | | | | | | | This is known to still work with Python2. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | Revert "python-dateutil: disable setuptools-scm for build"Alexandru Ardelean2021-06-302-33/+1
| | | | | | | | | | | | | | | | This reverts commit 29da5d65b6dc10ee6c2f8bfc7c868245289b2157. That fix doesn't work fully correct as the egg directory has version 0.0.0. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | python-dateutil: disable setuptools-scm for buildAlexandru Ardelean2021-06-302-1/+33
|/ | | | | | | | | | | | | | | | Fixes https://github.com/openwrt/packages/issues/15988 It seems that the newer setuptools-scm package (6.0.1) has some Python3-only syntax. For the 19.07 release, where Python2 is still around this causes the python-dateutil package to fail to build. See https://github.com/pypa/setuptools_scm/issues/541 However, removing 'setuptools-scm' from the build also works. This change does that. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* python-aiohttp: backport fix for CVE-2021-21330Josef Schlehofer2021-03-222-1/+26
| | | | | | | More details: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* python-maho-mqtt: bump to versio 1.5.1Alexandru Ardelean2021-03-011-4/+4
| | | | | | | | | Docs say it also supports MQTT 5.0. Added to description. Updated title as on pypi.org Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit ee0e11c1ab5ff94f6bfcd6d98c8f4b09327f7412)
* python3: Update to 3.7.10, refresh patchesJeffery To2021-02-223-5/+5
| | | | | | | | | Includes fixes for: * CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr * CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon as a query args separator Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-paho-mqtt: Update to version 1.5.0Josef Schlehofer2021-02-121-6/+7
| | | | | | | | | Try to fix license according to SPDX. Add PKG_LICENSE_FILES. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit f8e36f9fd6d5040f3ce69a1dd3f844872ea306b9) [use pypi.mk for Python package]
* python3: Update to 3.7.9, refresh/remove backported patchesJeffery To2020-10-1711-392/+9
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-urllib3: update to version 1.25.10 (security fix)Jan Pavlinec2020-10-141-2/+2
| | | | | | | Fixes: CVE-2020-26137 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* python-pytz: update to 2019.03Fabian Lipken2020-10-051-2/+2
| | | | | Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com> (cherry picked from commit 0f2cf9ebd6e4f836c3824433a421928bf13d5275)
* python-sentry-sdk: Update to version 0.12.3Josef Schlehofer2020-10-021-2/+2
| | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit fd9ebe3d707544d87a54b7d868f9ddebe0daf463)
* Werkzeug: Update to version 0.16.0Josef Schlehofer2020-09-301-11/+6
| | | | | | | | | | | - Remove PKG_BUILD_DEPENDS as it is no longer necessary. - The Python3 is already included in DEPENDS. - Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version. - Change TITLE and description - Add source package Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 267796c316d12f3c310a4800d317fcab7a41c7ab)
* Flask: update to version 1.1.2Daniel Golle2020-09-301-4/+4
| | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 90790b6b8f8413002ab6c8cf921daacf849884e7)
* Flask: Update to version 1.1.1Josef Schlehofer2020-09-301-7/+8
| | | | | | | | - Change TITLE and URL to better one - Add source package Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 19e12971b8ac3294e5f22f1e9dd115c91405d88e)
* python-ifaddr: update to version 0.1.7Josef Schlehofer2020-09-301-7/+5
| | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 98eb81ccd66133586a2ad19ab5bd6ab5a75ed61f)
* python-zeroconf: update to version 0.28.0Josef Schlehofer2020-09-231-4/+2
| | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 1c2f729c9d768c08cd43763737de35f311d39fcf)
* python-zeroconf: update to version 0.24.4Josef Schlehofer2020-09-231-5/+5
| | | | | | | Update copyright Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 8ed94a07fc18908379d4f8d5c71256eaacf80b7d)
* python-rsa: downgrade to version 4.5 for python2Jan Pavlinec2020-09-081-1/+8
| | | | | | | | Note: This fixes error introduced in https://github.com/openwrt/packages/commit/7af8eaad11ad2e449ed47529f1b325d7643b7817 Version 4.6 doesn't support python2 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* python-rsa: update to version 4.6 (security fix)Jan Pavlinec2020-09-031-7/+5
| | | | | | | Fixes CVE-2020-13757 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz> (cherry picked from commit 4e211927f33d50306559f85d89ad3bade4d627ec)
* python,python3: Use locked for host pipJeffery To2020-08-312-13/+19
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: fix rebasing errorRosen Penev2020-08-151-1/+2
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* python: fix host compilation with clangRosen Penev2020-08-152-2/+2
| | | | | | Matched rpath parameter with Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* python3: fix host compilation with clangRosen Penev2020-08-152-3/+2
| | | | | | | Matched rpath parameter with Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit b40c40151c2ac3dd11d908a0548ac97e6b5c8455)
* python3: Backport security fixesJeffery To2020-07-206-1/+384
| | | | | | | | This backports fixes for security issues, including: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2019-20907: Infinite loop in the tarfile module Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #12756 from ↵Rosen Penev2020-07-082-1/+34
|\ | | | | | | | | jefferyto/python3-maxminddb-fix-build-openwrt-19.07 [openwrt-19.07] python3-maxminddb: Fix build when using newer setuptools
| * python3-maxminddb: Fix build when using newer setuptoolsJeffery To2020-07-082-1/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | This package fails to build with newer setuptools, because setuptools removed the (deprecated) Features feature in v46.0.0[1]. This adapts a commit[2] to remove the use of this feature. (Changes to code formatting prevent the original commit/patch to be used.) [1]: https://github.com/pypa/setuptools/blob/aff64ae89e00e25fb3868bf528a14c18e7af0cf4/CHANGES.rst#v4600 [2]: https://github.com/maxmind/MaxMind-DB-Reader-python/commit/3aac426e354f91814f6fd0829baee137b0bb093f Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | python3: Use default _PYTHON_HOST_PLATFORMJeffery To2020-07-084-13/+28
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This lets the Python build process set _PYTHON_HOST_PLATFORM instead of forcing an explicit value. Also: * Save the target _PYTHON_HOST_PLATFORM value during Build/InstallDev for use when building target Python packages (in python3-package.mk). * Use the (mostly) default PYTHON_FOR_BUILD value, instead patch configure to remove the platform triplet from the sysconfigdata file name. * Remove the "CROSS_COMPILE=yes" make variable (there is no indication that this variable is necessary). * Force host pip to build packages from source instead of downloading binary wheels. Previously, host pip can download universal (platform-independent) wheels but not platform-specific wheels, because of the custom _PYTHON_HOST_PLATFORM value. (Packages that do not have universal wheels would be compiled from source.) With a correct _PYTHON_HOST_PLATFORM, host pip can install platform-specific wheels as well. However, the pre-built shared object (.so) files in these wheels will have the host's platform triplet in their file names. When target Python packages are built (using the target's _PYTHON_HOST_PLATFORM), Python will not use these shared object files. By forcing host pip to build packages from source, the built shared object files will not have the platform triplet in their file names. (Host Python has been patched to remove the platform triplet from file names.) This allows these packages to be used when building target Python packages. (The net effect of this complete change is that platform-dependent packages will continue to be compiled from source, while platform-independent packages will now also be compiled from source.) Fixes https://github.com/openwrt/packages/issues/12680. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Update to 3.7.8, refresh/rework patchesJeffery To2020-06-3011-43/+38
| | | | | | | | | | | | This contains a fix for CVE-2020-8492 (Denial of service in urllib.request.AbstractBasicAuthHandler)[1]. This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://docs.python.org/release/3.7.8/whatsnew/changelog.html#python-3-7-8-release-candidate-1 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python-setuptools: Fix error when installing from sourceJeffery To2020-05-213-1/+18
| | | | | | | | | | | | | | | | | | | When a Python package is installed from source (i.e. using setup.py) into a custom location (with --home), setuptools may want to create a site.py file in the custom location. This file is created based on the source code of site-patch.py, a file bundled with setuptools. Because the normal OpenWrt setuptools package does not contain Python source code, this file is missing and the installation will end with an error. This copies site-patch.py to site-patch.py.txt so that it will be included in python3-setuptools, and patches setuptools to look for this file. See https://github.com/openwrt/packages/issues/12223 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-setuptools: Fix error when installing from sourceJeffery To2020-05-213-1/+18
| | | | | | | | | | | | | | | | | | | | When a Python package is installed from source (i.e. using setup.py) into a custom location (with --home), setuptools may want to create a site.py file in the custom location. This file is created based on the source code of site-patch.py, a file bundled with setuptools. Because the normal OpenWrt setuptools package does not contain Python source code, this file is missing and the installation will end with an error. This copies site-patch.py to site-patch.py.txt so that it will be included in python3-setuptools, and patches setuptools to look for this file. See https://github.com/openwrt/packages/issues/12223 Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 70a7f736c5d6fb9ebec1acc8b3e8ca77704361bf)
* python-openssl: Add dependency on ca-certsJeffery To2020-05-202-2/+2
| | | | | | | | | The ssl module assumes OpenSSL can load the default trust anchors (root CA certificates). From https://github.com/openwrt/packages/issues/12209 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-openssl: Add dependency on ca-certsJeffery To2020-05-202-2/+2
| | | | | | | | | | The ssl module assumes OpenSSL can load the default trust anchors (root CA certificates). From https://github.com/openwrt/packages/issues/12209 Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit d2b0cc523dadc6a8ec4535561860b77cc9ee4fe2)
* python: Update to 2.7.18, refresh patchesJeffery To2020-04-294-20/+6
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python: Fix host build tool names recorded in target filesJeffery To2020-04-282-1/+5
| | | | | | | | | | | | | | | | | | | | | | Python will record the values of CC, CXX, AR, and RANLIB (and other configure options) used during compilation. pip will use these programs when asked to compile extension modules on the target device. * If ccache is used during build, CC and CXX will be ccache_cc and ccache_cxx, respectively, which are not available on-device (#11912). * If an external toolchain is used during build, the values of these variables will contain the external toolchain prefix, which may not be available on target. * If the normal toolchain is used during build, AR and RANLIB will contain the toolchain prefix, but the names of ar and ranlib on-device do not contain the prefix; they are named "ar" and "ranlib". This changes the values of these variables in Python's files to match the names available on-device, and without any toolchain prefix. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3: Fix host build tool names recorded in target filesJeffery To2020-04-282-1/+10
| | | | | | | | | | | | | | | | | | | | | | | | Python will record the values of CC, CXX, AR, and READELF (and other configure options) used during compilation. pip will use these programs when asked to compile extension modules on the target device. * If ccache is used during build, CC and CXX will be ccache_cc and ccache_cxx, respectively, which are not available on-device (#11912). * If an external toolchain is used during build, the values of these variables will contain the external toolchain prefix, which may not be available on target. * If the normal toolchain is used during build, AR and READELF will contain the toolchain prefix, but the names of ar and readelf on-device do not contain the prefix; they are named "ar" and "readelf". This changes the values of these variables in Python's files to match the names available on-device, and without any toolchain prefix. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 9f81ab895eca0709d1a7b4804b36a5cd00b4f368)
* python-pip: Fix error when installing packages that require compilationJeffery To2020-04-242-1/+14
| | | | | | This addresses one of the issues raised in #11912. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* python3-pip: Fix error when installing packages that require compilationJeffery To2020-04-242-1/+14
| | | | | | | This addresses one of the issues raised in #11912. Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit 11bc05763d6cb351842a7bd55e736b601656a41a)
* python-requests: update to version 2.23.0Javier Marcet2020-04-061-2/+2
| | | | | | | | | | | | | | Package python-idna was updated 2 weeks ago in OpenWrt 19.07. It causes an issue: pkg_resources.ContextualVersionConflict: (idna 2.9 (/usr/lib/python3.7/site-packages), Requirement.parse('idna<2.9,>=2.5'), {'requests'}) This is fixed in 2.23.0. Signed-off-by: Javier Marcet <javier@marcet.info> (cherry picked from commit d62e8b9f3cd3ab9a0df23f721c24f9ef4d16836c) Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> [add commit message]
* Merge pull request #11646 from ↵Hannu Nyman2020-03-231-2/+2
|\ | | | | | | | | jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07 [openwrt-19.07] python-pyasn1-modules: Update to 0.2.8
| * python-pyasn1-modules: Update to 0.2.8Jeffery To2020-03-241-2/+2
| | | | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com> (cherry picked from commit a6f1e7689b806e3a2baf1446cb8cb547cbc03797)
generated by cgit (git 2.46.0) at 2026-10-12 11:22:52 +0000