Commit graph

2246 commits

Author SHA1 Message Date
Jeffery To
daebf4aba9 python-six: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5be603a836)
2019-11-11 18:39:36 +08:00
Josef Schlehofer
aa4c5e7de6
Revert "Revert "perl-www-curl: curl 7.66.0 compatibility""
This is required as curl 7.66.0 was cherry-picked to openwrt-19.07 3
days ago. Otherwise, compilation of perl-www-curl fails.

This reverts commit ec6cd9b9c3.
2019-11-10 20:40:19 +01:00
Josef Schlehofer
a6f026ff5b
python-zipp: fix python-more-itertools dependency
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 426ed75dbe)
2019-11-10 18:30:30 +01:00
Jan Pavlinec
0faf7bfcc2
python-zipp: add new package
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit f0a79ca148)
2019-11-10 18:30:19 +01:00
Jakub Piotr Cłapa
91da56a942
perl: fixed host compilation of static perl on MacOS
All symbols on MacOS are prefixed with an underscore which
interfered with the filtering mechanism (added in perl 5.28)
for extension libraries to be linked into static perl.

Signed-off-by: Jakub Piotr Cłapa <jpc@loee.pl>
(cherry-picked from commit 3954356)
2019-11-10 18:28:23 +01:00
Rosen Penev
ec6cd9b9c3
Revert "perl-www-curl: curl 7.66.0 compatibility"
This reverts commit 3d98d7fd05.

This was a bad backport.
2019-11-09 11:30:15 -08:00
Rosen Penev
16657121a1
Merge pull request #10458 from jefferyto/python-cffi-1.13.2-openwrt-19.07
[openwrt-19.07] python-cffi: Update to 1.13.2
2019-11-04 09:28:13 -08:00
Jeffery To
e1d9652edc python-cffi: Update to 1.13.2
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from c21eee0df4)
2019-11-04 23:45:03 +08:00
Jeffery To
07835fc26e golang: Update to 1.13.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 37facb63f5cc9906f4b32791b572506f68e0d79e)
2019-11-04 22:55:53 +08:00
Jeffery To
58ed21040c
python,python3: Add PYPI_SOURCE_NAME to pypi.mk
This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 1bacdd52f7)
2019-11-02 20:21:46 +01:00
Jeffery To
866b42c60e
python,python3: Add pypi makefile
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit add4c42191)
2019-11-02 19:01:21 +01:00
Alexandru Ardelean
807c557cf9 django: bump to version 1.11.25
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e9e687a1f1)
2019-10-30 23:16:57 +08:00
Alexandru Ardelean
4574e8fcb9 python-cffi: bump to version 1.13.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from dff2fe2963)
2019-10-30 05:49:55 +08:00
Luiz Angelo Daros de Luca
702c655874 ruby: update to 2.6.5
2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit d3d0c28149)
2019-10-27 16:09:43 -03:00
Alexandru Ardelean
f18bc652c7
django-ranged-response: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Not updating deps here, since that will be done in the next changeset that
will convert packages to the Python[3] packaging format.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 70ebc7a2f4)
2019-10-24 21:33:37 +02:00
Josef Schlehofer
629b8fb60e
flup: add Python3 variant and src package
- Add PKG_LICENSE_FILES
- Reorder things in Makefile
- Add dependency python3-logging otherwise I cannot import
flup.server.ajp
flup.server.scgi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit a5b2ba9b4d)
2019-10-23 15:34:59 +02:00
Josef Schlehofer
6f392ad0cb
django-statici18n: fix changes in merge 2019-10-23 09:16:42 +02:00
Josef Schlehofer
c4782e6e8b
django-web-pack-loader: fix changes in merge conflict 2019-10-23 09:15:47 +02:00
Eneas U de Queiroz
db4cbf71a5
django: move django* packages under django submenu
This changes the python[3]-django dependencies in packages to be
non-selecting, and adds an MDEPENDS line so that the *-src packages get
placed inside the django menu as well.

Added MENU:= to the src-package definitions in python[3]-package.mk,
so it does not import that setting from the binary package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 90527d75af)
2019-10-23 01:59:52 +02:00
Alexandru Ardelean
19e137162d
django-simple-captcha: update packaging format + add python3 variant
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Also, changing here is the download URL to github's codeload, since that
one offers .tar.gz archives.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 545cff8b63)
2019-10-23 01:57:51 +02:00
Alexandru Ardelean
b686fa3f48
python-qrcode: update Eneas' email as per prev request
The email change was part of a previous request from a different PR series.
In this series, the change is the only thing left to do (from what the
original changeset intended to do).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f5eb040e6b)
2019-10-23 01:55:16 +02:00
Josef Schlehofer
7c48116933
python-qrcode: add Python3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 6c7a31ec5e)
2019-10-23 01:55:00 +02:00
Alexandru Ardelean
7257bb05a9
django-restframework: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 441f486081)
2019-10-23 01:51:26 +02:00
Alexandru Ardelean
d386164ae7
django-postoffice: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 15272fcc65)
2019-10-23 01:51:12 +02:00
Alexandru Ardelean
2a8c5fe35e
django-picklefield: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 6a7f547a38)
2019-10-23 01:50:56 +02:00
Alexandru Ardelean
74f3bf88df
django-jsonfield: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 7bbc5131f2)
2019-10-23 01:50:43 +02:00
Alexandru Ardelean
03852aa990
django-formtools: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit e4d8127cae)
2019-10-23 01:50:29 +02:00
Alexandru Ardelean
8df3e1ae45
django-compressor: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 35cddd9b6f)
2019-10-23 01:50:17 +02:00
Alexandru Ardelean
c3710fadac
django-appconf: update packaging format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 3392fbc6fc)
2019-10-23 01:50:05 +02:00
Alexandru Ardelean
dcadf6baac
django-constance: convert to python pkg format + add python3 variant
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b2936a2d0)
2019-10-23 01:49:35 +02:00
Alexandru Ardelean
f8ff5017d2
django: convert to python pkg format + add python3 variant
This also updates all dependencies to use the new `python-django` package.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f026dba26e)
2019-10-23 01:49:15 +02:00
Alexandru Ardelean
d735b2be96 python-pillow: bump to version 6.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-22 10:54:39 +02:00
Josef Schlehofer
3569a3b029 pillow: add Python3 variant and update to 6.1.0
- Add @commodo as maintainer

Co-Authored-By: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-22 10:54:22 +02:00
Jeffery To
18a7c29f55 python: Update to 2.7.17, refresh patches
Patches already merged and so removed:
* 011-fix-ssl-build-use-have-npn.patch
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 022-bpo-30458-Disallow-control-chars-in-http-URLs-GH-13315.patch
* 023-bpo-35907-Avoid-file-reading-as-disallowing-the-unnecessary-URL-scheme-in-urllib-GH-11842.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 83b300aa83)
2019-10-21 23:42:32 +08:00
Josef Schlehofer
0882737b4a
python3: Update to version 3.7.5
setuptools: Updated to version 41.2.0
pip: Updated to version 19.2.3

Removed patches:
- 017: code was refactored
- 02{5,6,7,8}: those patches were backported from upstream and they are
included in 3.7.5

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-21 15:19:32 +02:00
Jeffery To
d97f776050 python-ipaddress: Update to 1.0.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 21858952976aad8ad92cbe76351c5535c39a3f2f)
2019-10-21 21:10:59 +08:00
Jeffery To
2dfbcb7b99 python-automat: Update to 0.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 57b4938babc41aa6e80709e4ba29bc6bec6a9472)
2019-10-21 21:10:38 +08:00
Jeffery To
5e981bfffe python-attrs: Update to 19.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 8c3f7dcc36a7b8af2069bbbd67cb745ac4b21dec)
2019-10-21 21:10:14 +08:00
Jeffery To
b89bf0470d python-cryptography: Update to 2.8
With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 23f308123c39236c6ceeaa7ffa8ecf18fda29e4d)
2019-10-21 13:44:25 +02:00
Jeffery To
bf66776f93
python-cffi: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 141ead6bd7)
2019-10-21 13:43:25 +02:00
Josef Schlehofer
a1a665c7e2
golang: Update to version 1.13.3
Fixes CVE-2019-17596

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 10d55f6)
2019-10-21 03:31:56 +02:00
Jeffery To
a0c1c2da6a python-pyasn1-modules: Update to 0.2.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5848f67e41)
2019-10-16 02:15:00 +08:00
Rosen Penev
c6f2699f96
Merge pull request #10183 from jefferyto/python-attrs-19.2.0-openwrt-19.07
[openwrt-19.07] python-attrs: Update to 19.2.0
2019-10-09 12:50:28 -07:00
Alexander Ryzhov
3d98d7fd05 perl-www-curl: curl 7.66.0 compatibility
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 7910715d86)
2019-10-08 14:57:26 -07:00
Jeffery To
863c1a41b4 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:21:03 +08:00
Jeffery To
18add705fa python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-05 00:04:39 +08:00
Jeffery To
1d6436623a python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:46:39 +08:00
Eneas U de Queiroz
4bbeb730a5
python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
2019-09-30 16:42:59 -03:00
Josef Schlehofer
faf6ec5800
python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
2019-09-30 10:02:40 +02:00
Rosen Penev
33ee8d1ec3 django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
2019-09-30 10:27:06 +03:00