Commit Graph

352 Commits

Author SHA1 Message Date
Josef Schlehofer
8459433eb8 python-urllib3: update to 1.24.3
- Fixes CVE-2019-9740, CVE-2019-11324
- RFC 3986 compliant
- Fix TITLE, which was too long for make menuconfig
- Add PKG_LICENSE_FILES
- Remove current maintainer

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-05-08 19:23:10 +02:00
Jeffery To
fbcac2d532 python,python3: Fix CVE-2019-9636 - urlsplit missing NFKC normalization
These patches address issue:
CVE-2019-9636: urlsplit does not handle NFKC normalization

Link to Python issue:
https://bugs.python.org/issue36216

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-04-21 00:52:30 +08:00
Rosen Penev
e47fe43ea5 Jinja2: Update to 2.10
Switch URL to a deterministic one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-03-19 00:19:46 +01:00
Karel Kočí
2324d341ea Jinja2: add missing dependency on markupsafe
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2019-03-05 17:20:36 +01:00
Alexandru Ardelean
d0f5ae180c [18.06] python3: fix [CVE-2018-20406]
Link to Python bug:
  https://bugs.python.org/issue34656

Upstream commit:
  71a9c65e74

OpenWrt 18.06 contains version Python 3.6.5, which doesn't contain this
fix.
Python 2.7 is not affected.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-02-13 10:27:22 +02:00
Jeffery To
4368783e97 python-idna: Add missing dependency on python(3)-codecs
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-01-27 20:26:48 +08:00
Jeffery To
480e4d7e88 python/python3: Fix lib2to3 fixes search
This is the patch from c98b12d9a9 (#7931),
applied for both python 2 and 3.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-01-13 06:14:36 +08:00
Hannu Nyman
85bfefb561 Merge pull request #7757 from jefferyto/openwrt-18.06-python-dist-info
[openwrt-18.06] python/python3: fix .dist-info missing for setuptools and pip
2019-01-01 21:55:43 +02:00
Hannu Nyman
94b3e50e04 Merge pull request #7820 from commodo/18-06-python3-CVE-2018-14647
[18.06] python3: backport CVE-2018-14647 patch from upstream
2018-12-31 22:33:38 +02:00
Alexandru Ardelean
34dec81901 python3: backport CVE-2018-14647 patch from upstream [18.06]
These patches are backports from Python 3.6 upstream.
The security issue is described here:
  https://nvd.nist.gov/vuln/detail/CVE-2018-14647

The Python bug report:
  https://bugs.python.org/issue34623

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-12-31 19:20:27 +02:00
Alexandru Ardelean
3785db429f python: backport CVE-2018-14647 patches from upstream [18.06]
These patches are backports from Python 2.7 upstream.
The security issue is described here:
  https://nvd.nist.gov/vuln/detail/CVE-2018-14647

The Python bug report:
  https://bugs.python.org/issue34623

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-12-31 18:58:19 +02:00
Jeffery To
e3f32b75b3 python/python3: fix .dist-info missing for setuptools and pip
Without .dist-info (similar to .egg-info), setuptools and pip are not
discoverable by pkg_resources.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-12-23 03:28:02 +08:00
Jeffery To
9250b7283a twisted: update to 18.4.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:58:14 +08:00
Jeffery To
d25196bc28 python-zope-interface: update to 4.5.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:35 +08:00
Jeffery To
e7af1e992d python-pyasn1: update to 0.4.3
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:25 +08:00
Jeffery To
8c545ae8dd python-ply: update to 3.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:16 +08:00
Jeffery To
dcdc8807a0 python-ipaddress: update to 1.0.22
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:57:04 +08:00
Jeffery To
4d225bb519 python-hyperlink: update to 18.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:56:53 +08:00
Jeffery To
c5a5b3c74c python-automat: update to 0.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:56:38 +08:00
Jeffery To
2a7c48c7fa python-attrs: update to 18.1.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-06-26 04:56:11 +08:00
Alexandru Ardelean
995b48121e python,python3: remove --ignore-installed flag for host packages
This was copied over from python-packages, when support for installing
packages host-side (via pip) was added.

Based on the discussion on this commit:
  612c53fc6c
it was mentioned that removing this may add more benefit in terms of
reducing build time, because packages won't get reinstalled every time.

I'm not entirely sure about any potential side-effects of this, but it's
worth trying it out.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-05-14 12:11:00 +03:00
Alexandru Ardelean
b7d1d2149e python3: update to version 3.6.5
Add PKG_RELEASE for setuptools and pip.
Refresh all patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-05-03 14:46:35 +03:00
Alexandru Ardelean
2ef484615d python: update to version 2.7.15
This also updates pip and setuptools.
With this occasion, they also get PKG_RELEASEs of their own.

Dropped patch 011-remove-setupterm-definition.patch
Manually re-applied 005-fix-bluetooth-support.patch
Ran make package/python/refresh to refresh other patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-05-03 14:46:12 +03:00
Hauke Mehrtens
f9016b5977 python/python3: remove zlib/host dependency
zlib is now a host tool and the zlib/host package was removed. this
dependency is not needed any more as there will always be a zlib host
library.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2018-04-28 16:20:44 +02:00
Alexandru Ardelean
b6973e5deb python,python3: remove --with-system-ffi=no config arg
Report https://github.com/openwrt/packages/issues/5638
It was mentioned that this causes build failures on Mac OS X.

The default behavior [in the setup.py script] is to check whether
`--with-system-ffi` is present in the CONFIG_ARGS env var.

However that back-fires a bit when `--with-system-ffi=no`, because the
condition `not '--with-system-ffi' in sysconfig.get_config_var("CONFIG_ARGS")`
evaluates to true.

This is a small bug in the `setup.py` script, but it looks like the
easiest/cleanest way to address it on our end is to just remove it entirely
from the HOST_CONFIGURE_ARGS.
At least that's how it looks like when testing on a Linux machine.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-03-14 16:21:41 +02:00
Alexandru Ardelean
ea62d1217c python,python3: limit underlinking behavior to linux platforms
This change was introduced in commit 1c54e2b0fb to address build
issues on Ubuntu 12.04.

However it was reported to cause issues on Mac OS X.
Report: https://github.com/openwrt/packages/issues/5310

It was also reported that removing this on MacOS X fixes the issue.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-03-14 16:18:30 +02:00
Alexandru Ardelean
f53904ebda lang/python/python-package-install.sh: assign SOURCE_DATE_EPOCH to PYTHONHASHSEED
Following a discussion on bugs.python.org:
* https://bugs.python.org/issue29708
* https://bugs.python.org/msg313384

It seems that setting a fixed value to PYTHONHASHSEED guarantees that
the bytecodes are generated consistently/in a reproducible manner.

Hopefully, this is the last bit to make Python3 build reproducible.
Tested this locally on a few files [that were not reproducible without
this change].

The PYTHONHASHSEED is only assigned to the host Python/Python3 during
compilation of byte-codes [from python source].

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-03-07 20:52:15 +02:00
Gergely Kiss
3d34c3a94d pytz: update to version 2018.3
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2018-02-23 21:29:32 +01:00
Gergely Kiss
14ddd5d4da django-statici18n: update to 1.6.1
Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
2018-01-28 01:55:52 +01:00
Hannu Nyman
7ced677124 Merge pull request #5456 from jefferyto/python-automat
python-automat: new package
2018-01-19 18:03:13 +02:00
Hannu Nyman
fbae202394 Merge pull request #5455 from jefferyto/python-hyperlink
python-hyperlink: new package
2018-01-19 18:03:02 +02:00
Hannu Nyman
9da7e1eaf4 Merge pull request #5454 from jefferyto/python-incremental
python-incremental: new package
2018-01-19 18:02:53 +02:00
Hannu Nyman
60d47335d6 Merge pull request #5453 from jefferyto/python-constantly
python-constantly: new package
2018-01-19 18:02:40 +02:00
Jeffery To
3690cac14b twisted: updated to 17.9.0, add src package
There have been some new dependencies added in recent versions of
Twisted (mostly internal classes that have been spun out into their own
libraries):

* constantly (#5453), since 16.5.0
* incremental (#5454), since 16.5.0
* Automat (#5456), since 17.1.0
* hyperlink (#5455) since 17.5.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-19 01:24:46 +08:00
Alexandru Ardelean
6494642caf python,python3: fix recursive deps caused by dangling DEPENDS
For python `src` packages we should clear out the DEPENDS
to prevent recursive deps from happening.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-01-17 17:30:48 +02:00
Hannu Nyman
f6f239f159 Merge pull request #5457 from jefferyto/python-pkg-setup-args-vars
python,python3: add vars to customize setup arguments / variables
2018-01-17 16:07:41 +02:00
Alexandru Ardelean
63dfa19812 python,python3: disable dependencies between python src packages
Related to:
 https://github.com/openwrt/packages/issues/5424

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2018-01-16 16:18:47 +02:00
Jeffery To
021271c1d3 python,python3: add vars to customize setup arguments / variables
This adds:

* PYTHON_PKG_SETUP_ARGS
* PYTHON_PKG_SETUP_VARS
* PYTHON3_PKG_SETUP_ARGS
* PYTHON3_PKG_SETUP_VARS

to customize Python package setup arguments / environment variables.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-16 04:10:49 +08:00
Jeffery To
39914d1f2c python-automat: new package
This is a new requirement for the Twisted package.

From the readme:

Automat is a library for concise, idiomatic Python expression of
finite-state automata (particularly deterministic finite-state
transducers).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-16 03:33:46 +08:00
Jeffery To
368d81a94d python-hyperlink: new package
This is a new requirement for the Twisted package.

From the readme:

Hyperlink provides a pure-Python implementation of immutable URLs. Based
on RFC 3986 and 3987, the Hyperlink URL makes working with both URIs and
IRIs easy.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-16 02:06:28 +08:00
Jeffery To
c394db70b0 python-incremental: new package
This is a new requirement for the Twisted package.

From the readme:

Incremental is a small library that versions your Python projects.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-16 01:35:35 +08:00
Jeffery To
036d57e6b8 python-constantly: new package
This is a new requirement for the Twisted package.

From the readme:

A library that provides symbolic constant support. It includes
collections and constants with text, numeric, and bit flag values.
Originally twisted.python.constants from the Twisted project.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-16 01:07:47 +08:00
Hannu Nyman
72a4ac1585 Merge pull request #5440 from jefferyto/python-txsocksx-src
python-txsocksx: use variant PyBuild/Compile syntax, add src package, refresh patches
2018-01-15 09:36:28 +02:00
Hannu Nyman
adca5fcdd6 Merge pull request #5441 from jefferyto/python-src-packages
python-*,python3-*: add src packages for multiple packages
2018-01-15 09:36:01 +02:00
Jeffery To
472514e606 python-cffi: update to 1.11.4, add src packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-15 01:59:14 +08:00
Jeffery To
64ae3625e1 python-*,python3-*: add src packages for multiple packages
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-15 01:33:01 +08:00
Jeffery To
44a362de08 python-txsocksx: use variant PyBuild/Compile syntax, add src package,
refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-01-14 23:48:43 +08:00
Hannu Nyman
f460719bf4 Merge pull request #5360 from commodo/python_reproducible
python,python3: honour the SOURCE_DATE_EPOCH for the build-info
2018-01-14 17:32:57 +02:00
Hannu Nyman
2cb09305ce Merge pull request #5439 from jefferyto/python-pyptlib-src
python-pyptlib: use default variant build/compile rule, add src package
2018-01-14 17:30:22 +02:00
Hannu Nyman
e7fba5f643 Merge pull request #5438 from jefferyto/python-ipaddress-src
python-ipaddress: use default variant build/compile rule, add src package
2018-01-14 17:29:51 +02:00