Commit graph

1615 commits

Author SHA1 Message Date
Michal Vasilek
ed66ae5f08 python3: update to 3.9.14
* fixes CVE-2021-28861
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-10-11 17:55:28 +02:00
Michal Vasilek
690d8dfab5
python-flask-socketio: update to 5.3.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7fd9d010a2)
2022-09-16 14:45:45 +02:00
Josef Schlehofer
df67597ab6
python-uci: update to version 0.9.0
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e340fe8a12)
2022-08-26 16:56:01 +02:00
Alexandru Ardelean
ec98bccb1d django: bump to version 3.2.15
Fixes: https://nvd.nist.gov/vuln/detail/CVE-2022-36359

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-08-22 09:27:42 +03:00
Alexandru Ardelean
7b6094381a
numpy: bump to version 1.20.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 731bb0265d)
2022-08-13 12:34:45 +02:00
Josef Schlehofer
da99ae7ec5
python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ce1679a07f)
2022-08-13 07:57:10 +02:00
Alexandru Ardelean
c45f72086c django: bump to version 3.2.14
Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-07-18 17:42:45 +03:00
Jeffery To
580926cb6c python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d7883)
2022-07-07 09:54:10 -07:00
Jeffery To
d53270bef3
python3: Update to 3.9.13
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-06-06 20:47:16 +08:00
Alexandru Ardelean
8b60367e15 django: bump to version 3.2.13
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-29 15:27:56 -07:00
Matt Merhar
8995d3f025 python3-speedtest-cli: update to 2.1.3
This includes a fix for a breaking change in the Speedtest API.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 77ebd65f49)
Signed-off-by: James White <james@jmwhite.co.uk>
2022-04-18 19:55:53 +02:00
Daniel Golle
78aa0f6cac
pynacl: fix build with updated sodium-minimal patch
Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ccd3b6c0a5)
2022-03-29 20:56:47 +02:00
Jeffery To
e6330a60e7 python3: Update to 3.9.12
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-27 12:40:55 -07:00
Jeffery To
a7a93cfcc8
python3: Update to 3.9.11, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-21 22:03:05 +08:00
Jeffery To
701ca25325
python-twisted: Update to 22.2.0
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 630d6800f2)
2022-03-06 23:37:33 +01:00
Jeffery To
4c07483961
python-twisted: Update to 22.1.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f3816d1c6)
2022-03-06 23:37:28 +01:00
Josef Schlehofer
e2bf8e1d80
MarkupSafe: update to version 2.1.0
Changelog:
https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d10b0836d)
2022-02-24 15:47:23 +01:00
Josef Schlehofer
f921cc4b74
python-dns: update to version 2.1.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 447c6fd57b)
2022-01-31 06:26:58 +01:00
Jeffery To
c7f25b25df python3: Update to 3.9.10, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-01-20 20:48:55 -08:00
Kerma Gérald
3f88edfa54 2to3: add package host tool
2to3 is a Python program that reads Python 2.x source code and applies a
  series of fixers to transform it into valid Python 3.x code. The standard
  library contains a rich set of fixers that will handle almost all code. 2to3
  supporting library lib2to3 is, however, a flexible and generic library, so it
  is possible to write your own fixers for 2to3. lib2to3 could also be adapted
  to custom applications in which Python code needs to be edited automatically.

This tool is necessary for fail2ban package because of issue
  https://github.com/openwrt/packages/issues/17311
  https://github.com/openwrt/packages/pull/17341

Simple 2to3.py script from Debian, thanks to Matthias Klose <doko@ubuntu.com>
From: https://salsa.debian.org/cpython-team/python3-defaults

(cherry picked from commit 2f91e1c9c5)
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2022-01-15 20:53:30 +01:00
Alexandru Ardelean
a877527123 python-lxml: update to version 4.6.5
Fixes: CVE-2021-43818
  https://nvd.nist.gov/vuln/detail/CVE-2021-43818

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-12-21 14:39:09 +01:00
Alexandru Ardelean
aa7454e461
python-packages: remove myself as maintainer
There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.

This patch does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b6)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2021-12-20 17:55:44 +08:00
Josef Schlehofer
916247d7bd
Merge pull request #17270 from BKPepe/update-python3
python3: update to version 3.9.9
2021-12-10 11:20:41 +01:00
Josef Schlehofer
92129f9cfe
python-babel: update to version 2.9.1
Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e2932db1ce)
2021-12-08 23:35:48 +01:00
Josef Schlehofer
134bae3026
python-babel: update to version 2.9.0
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a31dc44d2d)
2021-12-08 23:35:44 +01:00
Josef Schlehofer
1743adc23f
python3: update to version 3.9.9
- Updated setuptools and pip
- Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-12-04 23:15:27 +01:00
Daniel Golle
fd4648a61e
pyodbc: update to version 4.0.32
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 264f7b2f5f)
2021-11-15 20:02:57 +00:00
Tianling Shen
aac8be18a7
pyodbc: update hash
This package was updated without a hash change.

Fixes: c157522580 ("pyodbc: update to version 4.0.31")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b783386890)
2021-11-15 20:02:53 +00:00
Daniel Golle
fe1b4a705f
pyodbc: update to version 4.0.31
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c157522580)
2021-11-15 20:02:49 +00:00
Daniel Golle
c4c8aeef2a
Werkzeug: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e971718892)
2021-11-15 20:02:44 +00:00
Daniel Golle
0eb4b34fe1
Jinja2: update to version 3.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f)
2021-11-15 20:02:39 +00:00
Daniel Golle
1c0dba8838
click: update to version 8.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48)
2021-11-15 20:02:33 +00:00
Michal Vasilek
18a48195cf
python-websockets: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bc10fbaebf)
2021-10-26 11:09:08 +02:00
Alexandru Ardelean
35fefa105a django: bump to version 3.2.8
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-19 13:22:47 -07:00
Alexandru Ardelean
0139e44ff2 python-pytz: bump to version 2021.3
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-10-08 09:41:14 -07:00
Alexandru Ardelean
7fcb8024d7 openpyxl: bump to version 3.0.9
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-30 14:28:44 -07:00
Josef Schlehofer
2cd1fa16b8
python-astral: update to version 2.2
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1deaf6dbbe)
2021-09-17 16:09:27 +02:00
Alexandru Ardelean
2bb2a48d14 openpyxl: bump to version 3.0.8
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-14 20:17:10 -07:00
Alexandru Ardelean
e72cc2b0a1 python3: bump version to 3.9.7
Refreshed patches.
And apply hack for line-endings in pep517 (from pip).

Hack comment:
  # FIXME: [1] get rid of this asap; 'patch' doesn't like Windows endings, and this file is full of them...
  #        I actually tried this in a number of ways and the only way to fix this is to implement
  #        a poor-man's dos2unix using sed.
  #        The issue is with the pip package; it seems that it throws in some Windows line-endings
  #        and 'patch' won't handle them. So, we do a "dos2unix" and then patch.
  #        We can get rid of this once this is solved upstream and in pip:
  #            https://github.com/pypa/pep517/pull/130

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 26988f905f)
2021-09-10 13:10:53 -07:00
Alexandru Ardelean
a5109ac20b django: bump to version 3.2.7
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-09-09 14:31:05 -07:00
Kerma Gérald
f056f252ce fail2ban: initial package of fail2ban version 0.11.2
python3-pyinotify: initial package version 0.9.6 of pyinotify for python3

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit bcb8775e48eb8f99a76b05a8539a0140513e4158)
2021-09-09 16:23:49 -04:00
Alexandru Ardelean
dd093d4106
pillow: bump to version 8.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit afdcfb525c)
2021-09-07 16:49:39 +02:00
Josef Schlehofer
6256cf49dd
python-certifi: update to version 2021.5.30
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 571326bd48)
2021-09-06 17:32:20 +02:00
Jeffery To
82dc4c08b1
python-cryptography: Update to 3.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69ae9c29a2)
2021-09-02 02:33:25 +08:00
Josef Schlehofer
fdee10fded
python3-setuptools: add _distutils_hack
I tried to install matplotlib by using pip and it failed with the following output:

2021-08-18T11:52:26,171 Collecting matplotlib
2021-08-18T11:52:26,173   Created temporary directory: /tmp/pip-unpack-wuth2u0e
2021-08-18T11:52:26,565   Using cached matplotlib-3.4.3.tar.gz (37.9 MB)
2021-08-18T11:52:38,659   Added matplotlib from https://files.pythonhosted.org/packages/21/37/           197e68df384ff694f78d687a49ad39f96c67b8d75718bc61503e1676b617/matplotlib-3.4.3.tar.                       gz#sha256=fc4f526dfdb31c9bd6b8ca06bf9fab663ca12f3ec9cdf4496fb44bc680140318 to build tracker '/tmp/pip-   req-tracker-u30x8pht'
2021-08-18T11:52:38,660     Running setup.py (path:/tmp/pip-install-afiyiers/                            matplotlib_8e717e38862f4976a3d6cb1832ba3261/setup.py) egg_info for package matplotlib
2021-08-18T11:52:38,661     Created temporary directory: /tmp/pip-pip-egg-info-kbtiezxq
2021-08-18T11:52:38,662     Running command python setup.py egg_info
2021-08-18T11:52:38,831     Traceback (most recent call last):
2021-08-18T11:52:38,832       File "<string>", line 1, in <module>
2021-08-18T11:52:38,832       File "/usr/lib/python3.9/site-packages/setuptools/__init__.py", line 8, in <module>
2021-08-18T11:52:38,833     ModuleNotFoundError: No module named '_distutils_hack'

More details about it:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968410

Once I applied the patch from the bug tracker, I got further to install
it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit feaaacc10f)
2021-08-19 21:24:20 +02:00
Alexandru Ardelean
20ff270f29 django: bump to version 3.2.6
And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-08-13 11:37:24 +03:00
Daniel Golle
9cb317541b
Flash: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 2abbf288ed)
2021-08-11 23:32:56 +02:00
Daniel Golle
eb5e13d370
Jinja2: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7b5b9b9d11)
2021-08-11 23:32:49 +02:00
Daniel Golle
573338fe41
Werkzeug: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 65c12b3c2f)
2021-08-11 23:32:45 +02:00
Daniel Golle
d1007d29f2
MarkupSafe: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c30b804842)
2021-08-11 23:32:35 +02:00