| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
| |
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 99d8554bcd1a16e2276ffb706c3f1e823ece65f3)
|
| |
|
|
|
|
|
| |
changelog: https://github.com/getsentry/sentry-python/blob/f6d3adcb3d7017a55c1b06e5253d08dc5121db07/CHANGELOG.md#154
Signed-off-by: Šimon Bořek <borek@autobakterie.cz>
(cherry picked from commit 32e2a2fa2ae20e9b1248753d65705c5a8d3bdfbc)
|
| |
|
|
|
|
|
| |
Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed
sockets).
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |\
| |
| | |
[openwrt-21.02] python3: Update to 3.9.17
|
| | |
| |
| |
| |
| |
| |
| | |
This includes an updated patch for pip, as the bundled pip was also
updated with this release.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |/
|
|
|
|
|
| |
Fixes CVE-2023-31047
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-31047
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
|
| |
|
|
|
|
|
| |
Fixes:
https://nvd.nist.gov/vuln/detail/CVE-2023-23969
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Release notes:
https://www.python.org/downloads/release/python-3916/
Fixes:
CVE-2022-43680
CVE-2022-37454
CVE-2022-45061
CVE-2022-42919
CVE-2015-20107
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| |
|
|
|
|
| |
Omitted during review.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
| |
fix CVE-2022-41323
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
|
| |
|
|
|
|
|
| |
Release notes:
- https://www.python.org/downloads/release/python-3915/
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| |
|
|
|
|
|
| |
* fixes CVE-2021-28861
* refresh patches
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
|
| |
|
|
|
| |
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7fd9d010a29173705241e2ade2172a28429234ca)
|
| |
|
|
|
|
|
|
|
| |
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e340fe8a124d1dcda2768ce3dfbcbaaf30fac44e)
|
| |
|
|
|
|
| |
Fixes: https://nvd.nist.gov/vuln/detail/CVE-2022-36359
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
| |
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 731bb0265da381b49e23fff9b1879a0a1d40f47e)
|
| |
|
|
|
|
|
| |
- Update copyright
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07fab643b85217b35f8c7857a9e3199c1)
|
| |
|
|
|
|
| |
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
|
|
| |
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d78837b7181b859472894aa243a2eae595b)
|
| |
|
|
| |
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |
|
|
|
|
|
|
| |
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
|
|
| |
This includes a fix for a breaking change in the Speedtest API.
Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 77ebd65f4945ea116365ccab3070ab31bed99ce7)
Signed-off-by: James White <james@jmwhite.co.uk>
|
| |
|
|
|
|
|
|
|
|
| |
Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ccd3b6c0a5e15822b66b07524639b24753f7aea3)
|
| |
|
|
| |
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 630d6800f284eef77426ad3980977b2e9b7896d3)
|
| |
|
|
|
| |
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f3816d1c6230076db33658d29c44b0dc5c849d1)
|
| |
|
|
|
|
|
|
| |
Changelog:
https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d10b0836df5c119fd570f00f57424ab19f59e66)
|
| |
|
|
|
| |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 447c6fd57b5ed92f82ab9945e1bd350f3e4866d5)
|
| |
|
|
| |
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
2to3 is a Python program that reads Python 2.x source code and applies a
series of fixers to transform it into valid Python 3.x code. The standard
library contains a rich set of fixers that will handle almost all code. 2to3
supporting library lib2to3 is, however, a flexible and generic library, so it
is possible to write your own fixers for 2to3. lib2to3 could also be adapted
to custom applications in which Python code needs to be edited automatically.
This tool is necessary for fail2ban package because of issue
https://github.com/openwrt/packages/issues/17311
https://github.com/openwrt/packages/pull/17341
Simple 2to3.py script from Debian, thanks to Matthias Klose <doko@ubuntu.com>
From: https://salsa.debian.org/cpython-team/python3-defaults
(cherry picked from commit 2f91e1c9c5876bcdac4630fdc0e417903d8f9eb9)
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
|
| |
|
|
|
|
|
| |
Fixes: CVE-2021-43818
https://nvd.nist.gov/vuln/detail/CVE-2021-43818
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.
This patch does that.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b617ee72e40220e6ab6b7ceaa079a192)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
| |\
| |
| | |
python3: update to version 3.9.9
|
| | |
| |
| |
| |
| |
| |
| | |
- Updated setuptools and pip
- Refreshed patches
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e2932db1ce45e1882b6935694a46c3a3b7e8536f)
|
| |/
|
|
|
|
|
| |
Update copyright
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a31dc44d2dd8cae498135b2994a7a117bc4c6e2d)
|
| |
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 264f7b2f5fff40d0d47b103703c17b1f6daef511)
|
| |
|
|
|
|
|
|
|
| |
This package was updated without a hash change.
Fixes: c1575225807cab ("pyodbc: update to version 4.0.31")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b783386890ac6d861adc181306c19a9ff2104632)
|
| |
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c1575225807cab0e1628793ccf3b04bab3c97174)
|
| |
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e9717188920014e01858b94cbfcc00c2ba692a0e)
|
| |
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f05d94dc15a06687ed178d59228cc4c)
|
| |
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48ae43d12322b04022292ff561cdecda)
|
| |
|
|
|
| |
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bc10fbaebffb036731b4e9a1fdc40c9d1f535ba0)
|
| |
|
|
| |
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
| |
And switch to AUTORELEASE for PKG_RELEASE.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
| |
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
|
| |
Update copyright
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1deaf6dbbeb1247ff34c1b569ccd922a0e656511)
|
| |
|
|
|
|
| |
And switch to AUTORELEASE for PKG_RELEASE.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Refreshed patches.
And apply hack for line-endings in pep517 (from pip).
Hack comment:
# FIXME: [1] get rid of this asap; 'patch' doesn't like Windows endings, and this file is full of them...
# I actually tried this in a number of ways and the only way to fix this is to implement
# a poor-man's dos2unix using sed.
# The issue is with the pip package; it seems that it throws in some Windows line-endings
# and 'patch' won't handle them. So, we do a "dos2unix" and then patch.
# We can get rid of this once this is solved upstream and in pip:
# https://github.com/pypa/pep517/pull/130
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 26988f905f1f78ee0fd67dc90c3c7b112ac1817d)
|