mirror of
https://github.com/openwrt/packages.git
synced 2026-10-13 16:37:36 +04:00
Josef Schlehofer
a149847ebe
Update to the latest 3.13 bugfix release. Bump PYTHON3_PIP_VERSION to 26.2.1 to match the pip wheel bundled in ensurepip, which the host build checks for. This pip also fixes CVE-2026-3219 in the host pip. Drop 100-test_hashlib-better-handle-support-for-SHA3.patch, which is included upstream since 3.13.10 (gh-141907). Refresh the other patches. Only the hunk offsets changed, and the changed patches get the git headers they have in master. The bundled libexpat, which the target build uses, goes from 2.7.3 to 2.8.2. Fixes CVEs: CVE-2025-6075, CVE-2025-8291, CVE-2025-11468, CVE-2025-12084, CVE-2025-13462, CVE-2025-13836, CVE-2025-13837, CVE-2025-15282, CVE-2025-15366, CVE-2026-0672, CVE-2026-0864, CVE-2026-0865, CVE-2026-1299, CVE-2026-1502, CVE-2026-2297, CVE-2026-3276, CVE-2026-3446, CVE-2026-3644, CVE-2026-4224, CVE-2026-4360, CVE-2026-4519, CVE-2026-4786, CVE-2026-6019, CVE-2026-6100, CVE-2026-6879, CVE-2026-7210, CVE-2026-7774, CVE-2026-8328, CVE-2026-9669, CVE-2026-11940, CVE-2026-11972, CVE-2026-12003, CVE-2026-15308, CVE-2026-18503, CVE-2026-45186 Release notes: https://docs.python.org/release/3.13.15/whatsnew/changelog.html Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
32 lines
1.0 KiB
Diff
32 lines
1.0 KiB
Diff
From 49e3c330d4b5e17a740bc51b7ebbb9a42c67e505 Mon Sep 17 00:00:00 2001
|
|
From: Sean Khan <datapronix@protonmail.com>
|
|
Date: Thu, 27 Jun 2024 22:06:30 -0400
|
|
Subject: [PATCH] Fix host build with LibreSSL
|
|
|
|
--- a/Modules/_ssl.c
|
|
+++ b/Modules/_ssl.c
|
|
@@ -4833,7 +4833,11 @@ _ssl__SSLContext_cert_store_stats_impl(P
|
|
int x509 = 0, crl = 0, ca = 0, i;
|
|
|
|
store = SSL_CTX_get_cert_store(self->ctx);
|
|
+#if !defined(LIBRESSL_VERSION_NUMBER)
|
|
objs = X509_STORE_get1_objects(store);
|
|
+#else
|
|
+ objs = X509_STORE_get0_objects(store);
|
|
+#endif
|
|
if (objs == NULL) {
|
|
PyErr_SetString(PyExc_MemoryError, "failed to query cert store");
|
|
return NULL;
|
|
@@ -4889,7 +4893,11 @@ _ssl__SSLContext_get_ca_certs_impl(PySSL
|
|
}
|
|
|
|
store = SSL_CTX_get_cert_store(self->ctx);
|
|
+#if !defined(LIBRESSL_VERSION_NUMBER)
|
|
objs = X509_STORE_get1_objects(store);
|
|
+#else
|
|
+ objs = X509_STORE_get0_objects(store);
|
|
+#endif
|
|
if (objs == NULL) {
|
|
PyErr_SetString(PyExc_MemoryError, "failed to query cert store");
|
|
goto error;
|