Commit graph

2319 commits

Author SHA1 Message Date
Jeffery To
32fb2ba0d6 python-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-21 22:07:17 +08:00
Jeffery To
6dac29693f python3-setuptools: Fix error when installing from source
When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 70a7f736c5)
2020-05-21 20:15:24 +08:00
Jeffery To
c062120822 python-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-20 04:37:53 +08:00
Jeffery To
c32e08f308 python3-openssl: Add dependency on ca-certs
The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d2b0cc523d)
2020-05-20 04:36:07 +08:00
Jeffery To
d3762591da golang: Set/reset default platform options for target Go compiler
Because the first stage for building target Go is actually a host build,
the default platform options (GO386, GOARM, etc.) are detected from the
host. These values are written to a source file and kept when building
the second stage.

This modifies this source file to set the appropriate values for the
target platform, and reset values for other platforms to their
cross-compiling / most compatible defaults.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit da3fb97b9c)
2020-05-17 03:30:36 +08:00
Jeffery To
f52fbe1d49 golang: Update to 1.13.11
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-05-17 03:30:36 +08:00
Michael Heimpold
2e6bd4cb86 php7: update to version 7.2.31
This fixes:
  - CVE-2019-11048

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-05-16 13:57:30 +02:00
Jeffery To
e34d0baee9 python: Update to 2.7.18, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-29 05:33:21 +08:00
Jeffery To
c1394a6a7f python: Fix host build tool names recorded in target files
Python will record the values of CC, CXX, AR, and RANLIB (and other
configure options) used during compilation. pip will use these programs
when asked to compile extension modules on the target device.

* If ccache is used during build, CC and CXX will be ccache_cc and
  ccache_cxx, respectively, which are not available on-device (#11912).

* If an external toolchain is used during build, the values of these
  variables will contain the external toolchain prefix, which may not be
  available on target.

* If the normal toolchain is used during build, AR and RANLIB will
  contain the toolchain prefix, but the names of ar and ranlib on-device
  do not contain the prefix; they are named "ar" and "ranlib".

This changes the values of these variables in Python's files to match
the names available on-device, and without any toolchain prefix.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-28 17:20:50 +08:00
Jeffery To
3d2dc69200 python3: Fix host build tool names recorded in target files
Python will record the values of CC, CXX, AR, and READELF (and other
configure options) used during compilation. pip will use these programs
when asked to compile extension modules on the target device.

* If ccache is used during build, CC and CXX will be ccache_cc and
  ccache_cxx, respectively, which are not available on-device (#11912).

* If an external toolchain is used during build, the values of these
  variables will contain the external toolchain prefix, which may not be
  available on target.

* If the normal toolchain is used during build, AR and READELF will
  contain the toolchain prefix, but the names of ar and readelf
  on-device do not contain the prefix; they are named "ar" and
  "readelf".

This changes the values of these variables in Python's files to match
the names available on-device, and without any toolchain prefix.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f81ab895e)
2020-04-28 13:56:47 +08:00
Michael Heimpold
d2a02ee24c Merge branch '19.07-php7' of https://github.com/BKPepe/packages into
a local branch for conflict resolving.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-04-25 21:16:19 +02:00
Michael Heimpold
f2143f6ebc php7: fix dependencies for mysqlnd (fixes #11113)
When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 50b1cd3757)
2020-04-25 21:11:43 +02:00
Jeffery To
cbb850712a python-pip: Fix error when installing packages that require compilation
This addresses one of the issues raised in #11912.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-24 23:31:44 +08:00
Jeffery To
5b66075571 python3-pip: Fix error when installing packages that require compilation
This addresses one of the issues raised in #11912.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 11bc05763d)
2020-04-24 23:29:34 +08:00
Jeffery To
f6bb9f3c2b golang: Update to 1.13.10
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-04-23 02:41:32 +08:00
Josef Schlehofer
09738290a3
php7: update to version 7.2.30
Fixes:
CVE-2020-7066
CVE-2020-7064

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-04-22 18:05:21 +02:00
Luiz Angelo Daros de Luca
45ca5d87de ruby: update to 2.6.6
This release includes security fixes, specially:

* CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
* CVE-2020-10933: Heap exposure vulnerability in the socket library

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-04-15 17:07:05 -03:00
Jeffery To
fc2a591b53 treewide: Use default PKG_BUILD_DIR when possible
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53e1692ae9)
2020-04-12 19:24:15 -07:00
Javier Marcet
eeeadde02c
python-requests: update to version 2.23.0
Package python-idna was updated 2 weeks ago in OpenWrt 19.07.
It causes an issue:

pkg_resources.ContextualVersionConflict: (idna 2.9 (/usr/lib/python3.7/site-packages), Requirement.parse('idna<2.9,>=2.5'), {'requests'})

This is fixed in 2.23.0.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d62e8b9f3c)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]
2020-04-06 18:16:17 +02:00
Hannu Nyman
97e68c1cbd
Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07
[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8
2020-03-23 21:10:54 +02:00
Hannu Nyman
3c6d37bfa3
Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07
[openwrt-19.07] python-idna: Update to 2.9
2020-03-23 21:10:36 +02:00
Hannu Nyman
72ccf67264
Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07
[openwrt-19.07] python-pycparser: Update to 2.20
2020-03-23 21:10:12 +02:00
Hannu Nyman
2c86818705
Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07
[openwrt-19.07] python-enum34: Update to 1.1.10
2020-03-23 21:09:57 +02:00
Hannu Nyman
897b76d324
Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07
[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch
2020-03-23 21:09:08 +02:00
Hannu Nyman
72731c08c8
Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07
[openwrt-19.07] python-twisted: Fix several request smuggling attacks
2020-03-23 21:08:12 +02:00
Jeffery To
db63e12089 python-pyasn1-modules: Update to 0.2.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b)
2020-03-24 01:49:04 +08:00
Jeffery To
4da9026f2a python-idna: Update to 2.9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088)
2020-03-24 01:40:32 +08:00
Jeffery To
a6b32c675c python-pycparser: Update to 2.20
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa)
2020-03-24 01:34:49 +08:00
Jeffery To
364c24dd2b python-enum34: Update to 1.1.10, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb)
2020-03-24 01:27:22 +08:00
Jeffery To
da05e08291 python-enum34: Update to 1.1.9, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8)
2020-03-24 01:26:52 +08:00
Jeffery To
4e5642de1a python-zope-interface: Update to 4.7.2, refresh patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fce)
2020-03-24 01:08:08 +08:00
Jeffery To
261d6cbaaa python-twisted: Fix several request smuggling attacks
This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: 4a7d22e490

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-23 23:22:39 +08:00
Jeffery To
0b654d52e9 golang: Update to 1.13.9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-03-23 21:55:51 +08:00
Josef Schlehofer
fd4da96672
python3: update to version 3.7.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-03-14 00:47:42 +01:00
Alexandru Ardelean
3b9648db39 django: bump to version 1.11.29
Includes several CVE fixes.
- CVE-2020-7471 in 1.11.28
- CVE-2020-9402 in 1.11.29

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2020-03-11 09:28:32 +02:00
Michael Heimpold
95c72d8aba php7: update to 7.2.28
This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-25 22:35:15 +01:00
Jeffery To
12b84e6acd golang: Update to 1.13.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-02-18 17:59:12 +08:00
Alexander Ryzhov
fc59357297
perl: define $sysroot for extensions
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit fed1b3b11b)
2020-02-15 22:05:28 -08:00
Rosen Penev
5c856ff558
perl: Don't build InstallDev under ARC
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2628584ffd)
2020-02-15 22:05:20 -08:00
Michael Heimpold
3cf0c61f2e php7: update to 7.2.27
This fixes:
  - CVE-2020-7059
  - CVE-2020-7060

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2020-02-07 21:09:24 +01:00
Jan Pavlinec
268ea7a78c
python-importlib-metadata: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-02-06 10:34:41 +01:00
Jeffery To
1d7cda2edc golang: Improve build isolation from user environment
* Set GOENV=off when building Go compiler and packages, to ignore user's
  environment configuration file
* Set GOCACHE when building host Go
* Unset GOTMPDIR, to use the buildroot temp directory instead of temp
  directories in build_dir

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 3b5f1c73fb)
2020-02-04 04:16:17 +08:00
Jeffery To
9a792f41c9 golang: Update to 1.13.7, add PKG_CPE_ID to Makefile
This update includes fixes for[1]:
* CVE-2020-7919 - doesn't appear to be published publicly yet
* CVE-2020-0601 - a Windows-related issue

[1]: https://github.com/golang/go/issues?q=milestone%3AGo1.13.7+label%3ACherryPickApproved

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 0dc4fa6efb)
2020-02-03 05:02:27 +08:00
Rosen Penev
cff7a04a6a
Merge pull request #11176 from jefferyto/python-fix-float-byte-order-openwrt-19.07
[openwrt-19.07] python,python3: Fix float byte order detection
2020-01-30 16:27:49 -08:00
Eneas U de Queiroz
36a1c0c5ae
python-certify: bump to 2019.11.28
This is a regular Mozilla CA bundle update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c799f2a913)
2020-01-30 14:59:51 -03:00
Jeffery To
ad50eb7c0a python3: Fix float byte order detection
This backports patches from bpo-34585[1] to fix byte order detection of
floats.

Fixing byte order detection allows the repr() of floats to be
shorter[2]. sys.float_repr_style should be 'short' instead of 'legacy'
on supported platforms.

See #11134.

[1]: https://bugs.python.org/issue34585
[2]: https://docs.python.org/3.8/whatsnew/3.1.html#other-language-changes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-30 19:12:25 +08:00
Jeffery To
a76dd0635c python: Fix float byte order detection
This backports patches from bpo-34585[1] to fix byte order detection of
floats.

Fixing byte order detection allows the repr() of floats to be shorter (a
feature backported to Python 2.7 from Python 3.1[2]).
sys.float_repr_style should be 'short' instead of 'legacy' on supported
platforms.

See #11134.

[1]: https://bugs.python.org/issue34585
[2]: https://docs.python.org/2.7/whatsnew/2.7.html#python-3-1-features

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from a0da5aec7f)
Omitted PKG_RELEASE change
2020-01-30 19:07:37 +08:00
Rosen Penev
30d0c2ee0f python: Replace utime with utimes
Optionally fixes compilation with uClibc-ng.

Based on the surrounding code, this looks like an oversight.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

(cherry picked from 608df65a62)
Adjusted PKG_RELEASE
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-30 19:04:39 +08:00
Rosen Penev
9cb0c7f4a0
Merge pull request #10990 from BKPepe/django-19.07
[OpenWrt 19.07] django: update to version 1.11.27
2020-01-22 18:41:20 -08:00
Jeffery To
2dbc88762c golang: Update to 1.13.6
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2020-01-15 01:26:40 +08:00