This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://github.com/python/cpython/pull/20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
19 lines
469 B
Makefile
19 lines
469 B
Makefile
#
|
|
# Copyright (C) 2007-2016 OpenWrt.org
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v2.
|
|
# See /LICENSE for more information.
|
|
#
|
|
|
|
# Note: keep in sync with setuptools & pip
|
|
PYTHON3_VERSION_MAJOR:=3
|
|
PYTHON3_VERSION_MINOR:=8
|
|
PYTHON3_VERSION_MICRO:=4
|
|
|
|
PYTHON3_VERSION:=$(PYTHON3_VERSION_MAJOR).$(PYTHON3_VERSION_MINOR)
|
|
|
|
PYTHON3_SETUPTOOLS_PKG_RELEASE:=1
|
|
PYTHON3_PIP_PKG_RELEASE:=1
|
|
|
|
PYTHON3_SETUPTOOLS_VERSION:=47.1.0
|
|
PYTHON3_PIP_VERSION:=20.1.1
|