From 1a3cef77d465ea1a53e5c80f869908f359e98c5e Mon Sep 17 00:00:00 2001 From: Jeffery To Date: Mon, 20 Jul 2020 05:48:57 +0800 Subject: python3: Update to 3.8.4, refresh/rework patches, backport patches This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://github.com/python/cpython/pull/20566 Signed-off-by: Jeffery To --- lang/python/python3/patches-setuptools/004-site-patch.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lang/python/python3/patches-setuptools/004-site-patch.patch') diff --git a/lang/python/python3/patches-setuptools/004-site-patch.patch b/lang/python/python3/patches-setuptools/004-site-patch.patch index 39b8c9026..279c35284 100644 --- a/lang/python/python3/patches-setuptools/004-site-patch.patch +++ b/lang/python/python3/patches-setuptools/004-site-patch.patch @@ -1,6 +1,6 @@ --- a/setuptools/command/easy_install.py +++ b/setuptools/command/easy_install.py -@@ -1315,7 +1315,10 @@ class easy_install(Command): +@@ -1324,7 +1324,10 @@ class easy_install(Command): return # already did it, or don't need to sitepy = os.path.join(self.install_dir, "site.py") -- cgit