Rosen Penev
25d0c17dfb
Merge pull request #10187 from commodo/python-asn1crypto-update
...
python-asn1crypto: bump to version 1.0.1
2019-10-09 12:43:20 -07:00
Alexandru Ardelean
03f625047d
python-asn1crypto: bump to version 1.0.1
...
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-10-09 13:23:28 +03:00
Alexandru Ardelean
929df778cc
python-pillow: bump to version 6.2.0
...
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-10-09 11:53:46 +03:00
Jeffery To
d62dc51634
python-attrs: Update to 19.2.0
...
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2019-10-09 05:18:44 +08:00
Alexandru Ardelean
2f19a94d65
python[3]-simplejson: drop tests from simplejson package
...
These tests take-up a bit of space. And they aren't typically needed.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-10-08 16:53:36 +03:00
Rosen Penev
a694e77d97
perl-uti: Update to 1.76
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:05 -07:00
Rosen Penev
db7739d0a9
perl-text-csv_xs: Update to 1.40
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:05 -07:00
Rosen Penev
f49c001db0
perl-test-warn: Update to 0.36
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:05 -07:00
Rosen Penev
b5c1e915c7
perl-test-harness: Update to 3.42
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:04 -07:00
Rosen Penev
6940bc0b06
perl-sub-uplevel: Update to 0.2800
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:04 -07:00
Rosen Penev
23bbf5b74e
perl-net-http: Update to 6.19
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:04 -07:00
Rosen Penev
73035a5e84
perl-lwp-mediatypes: Update to 6.04
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:04 -07:00
Rosen Penev
8c7b110283
perl-http-server-simple: Update to 0.52
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:03 -07:00
Rosen Penev
7dec647c2f
perl-http-message: Update to 6.18
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:03 -07:00
Rosen Penev
782be8446c
perl-http-daemon: Update to 6.06
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:03 -07:00
Rosen Penev
308b9fedfe
perl-http-cookies: Update to 6.04
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:02 -07:00
Rosen Penev
36b6d15f70
perl-html-form: Update to 6.04
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:02 -07:00
Rosen Penev
03656dfea6
perl-file-sharedir-install: Update to 0.13
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:02 -07:00
Rosen Penev
a3d40c56a3
perl-dbi: Update to 1.642
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:02 -07:00
Rosen Penev
a572df4e1b
perl-compress-bzip: Update to 2.26
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:01 -07:00
Rosen Penev
6aa0cfb2e5
perl-cgi: Update to 4.44
...
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-05 12:22:01 -07:00
Jeffery To
a3be5cfa92
python,python3: Fix CVE-2019-16056, CVE-2019-16935
...
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)
CVE-2019-16935 was fixed for python3 in #10109
Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2019-10-04 23:54:46 +08:00
Jeffery To
47d6d8e514
python-simplejson: Fix python[3]-decimal dependency
...
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.
[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7
Signed-off-by: Jeffery To <jeffery.to@gmail.com >
2019-10-04 22:40:25 +08:00
Michael Heimpold
f14a76253a
Merge pull request #10126 from stefaang/php7-mod-gd
...
php7-mod-gd: enable libwebp
php7: bump to 7.2.23
2019-10-03 14:32:46 +02:00
Stefaan Ghysels
dacda44755
php7: bump to 7.2.23
...
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com >
2019-10-03 13:44:23 +02:00
Stefaan Ghysels
84a449440a
php7-mod-gd: enable libwebp
...
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com >
2019-10-03 13:42:38 +02:00
Rosen Penev
d2df36bbb0
vala: Update to 0.46.2
...
Removed inactive maintainer.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-10-02 15:15:00 -07:00
Rosen Penev
15dfcc3611
Merge pull request #10121 from BKPepe/werkzeug
...
Werkzeug: Update to version 0.16.0
2019-10-02 12:37:06 -07:00
Rosen Penev
0d3d4ca894
Merge pull request #10122 from BKPepe/flask
...
Flask: Update to version 1.1.1
2019-10-02 12:36:11 -07:00
Josef Schlehofer
1ccf2377fc
python3-maxminddb: Update to version 1.5.1
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-01 00:38:47 +02:00
Josef Schlehofer
19e12971b8
Flask: Update to version 1.1.1
...
- Change TITLE and URL to better one
- Add source package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-01 00:21:42 +02:00
Josef Schlehofer
267796c316
Werkzeug: Update to version 0.16.0
...
- Remove PKG_BUILD_DEPENDS as it is no longer necessary.
- The Python3 is already included in DEPENDS.
- Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version.
- Change TITLE and description
- Add source package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-10-01 00:15:35 +02:00
Josef Schlehofer
144c8da84a
python-pyrsistent: Update to version 0.15.4
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-30 21:22:35 +02:00
Josef Schlehofer
80def9e653
python3: backport three security patches
...
Fixes: CVE-2019-16935
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-29 23:18:29 +02:00
Josef Schlehofer
65b7bd6cc0
golang: Update to version 1.13.1
...
Fixes CVE-2019-16276
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-29 00:53:05 +02:00
Rosen Penev
014ebb2f16
Merge pull request #10083 from BKPepe/sentrysdk
...
python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:09 -07:00
Rosen Penev
b72cbb7e2c
Merge pull request #10092 from ysc3839/pycryptodome
...
python-cryptodome: update to 3.9.0
2019-09-27 12:07:08 -07:00
Rosen Penev
ccd2b767d9
jamvm: Don't compile on ARM64
...
Not supported.
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-09-27 10:09:44 -07:00
Alexander Ryzhov
7910715d86
perl-www-curl: curl 7.66.0 compatibility
...
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru >
2019-09-27 15:02:29 +03:00
Richard Yu
ad9fe1b60b
python-cryptodome: update to 3.9.0
...
Signed-off-by: Richard Yu <yurichard3839@gmail.com >
2019-09-27 17:05:44 +08:00
Josef Schlehofer
ff106ae376
python-sentry-sdk: Update to version 0.12.2
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-26 18:21:43 +02:00
Josef Schlehofer
da51877e7f
python-urllib3: Update to version 1.25.6
...
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
2019-09-26 11:45:40 +02:00
Jan Pavlinec
ceadbcbb64
treewide: add PKG_CPE_ID for cvescanner
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-09-24 13:51:22 +02:00
Alexandru Ardelean
5f9ea76e7a
gunicorn: convert to Python packaging format + add Python3 variant
...
And splitting the gunicorn[3] binary/executable away from the
python[3]-gunicorn libraries. This was inspired from Debian packaging.
The gunicorn[3] binaries require the new `python[3]-pkg-resources`
libraries to run, which add ~1.1 MB on the [ram]disk when uncompressed.
For the Python2 variant, the `_gaiohttp.py` is dropped as it fails to
compile, so it would likely be unusable anyway:
```
File "/usr/lib/python2.7/site-packages/gunicorn/workers/_gaiohttp.py", line 84
yield from self.wsgi.close()
^
SyntaxError: invalid syntax
```
People around the web recommend this as well:
https://stackoverflow.com/questions/25611140/syntax-error-installing-gunicorn
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803170
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803202
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-09-20 14:11:08 +03:00
Alexandru Ardelean
721642908c
python,python3: add Py[3]Shebang functions & move outside of script
...
Some packages just install some Python binaries, that may need their
shebang fixed.
This change adds some utilities to help with that and try to centralize the
sed rules a bit.
It also removes the logic from the `python-package-install.sh` into the
`python-package[3].mk` files. This does 2 things:
1. It minimizes the need for the shell script to know the Python
version 2/3
2. Makes the logic re-usable in packages; especially if the install rules
differ a bit
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-09-20 14:10:00 +03:00
Alexandru Ardelean
ed0e77f3c3
python,python3: split python[3]-pkg-resources from setuptools
...
This package is required by other packages to run some binaries via
`load_entry_point`.
So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-09-20 13:42:40 +03:00
Alexandru Ardelean
b104c56e2b
python: change condition check for legacy opt for Python3
...
As I remember this worked.
But since `set -e` is set, I am a bit paranoid about it. In the sense that
it may fail if `ver` != 3.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com >
2019-09-20 13:42:21 +03:00
Eneas U de Queiroz
acf7c540ca
python-certifi: bump to 2019.9.11
...
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com >
2019-09-19 14:30:35 -03:00
Rosen Penev
64a02079da
django: Update to 1.11.24
...
Fixes a whole bunchs of CVEs:
CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235
Signed-off-by: Rosen Penev <rosenp@gmail.com >
2019-09-18 14:40:47 -07:00
Jan Pavlinec
299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-09-17 12:40:26 +02:00