Commit Graph

3246 Commits

Author SHA1 Message Date
Rosen Penev 25d0c17dfb Merge pull request #10187 from commodo/python-asn1crypto-update
python-asn1crypto: bump to version 1.0.1
2019-10-09 12:43:20 -07:00
Alexandru Ardelean 03f625047d python-asn1crypto: bump to version 1.0.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-09 13:23:28 +03:00
Alexandru Ardelean 929df778cc python-pillow: bump to version 6.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-09 11:53:46 +03:00
Jeffery To d62dc51634 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:18:44 +08:00
Alexandru Ardelean 2f19a94d65 python[3]-simplejson: drop tests from simplejson package
These tests take-up a bit of space. And they aren't typically needed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-08 16:53:36 +03:00
Rosen Penev a694e77d97 perl-uti: Update to 1.76
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:05 -07:00
Rosen Penev db7739d0a9 perl-text-csv_xs: Update to 1.40
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:05 -07:00
Rosen Penev f49c001db0 perl-test-warn: Update to 0.36
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:05 -07:00
Rosen Penev b5c1e915c7 perl-test-harness: Update to 3.42
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:04 -07:00
Rosen Penev 6940bc0b06 perl-sub-uplevel: Update to 0.2800
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:04 -07:00
Rosen Penev 23bbf5b74e perl-net-http: Update to 6.19
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:04 -07:00
Rosen Penev 73035a5e84 perl-lwp-mediatypes: Update to 6.04
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:04 -07:00
Rosen Penev 8c7b110283 perl-http-server-simple: Update to 0.52
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:03 -07:00
Rosen Penev 7dec647c2f perl-http-message: Update to 6.18
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:03 -07:00
Rosen Penev 782be8446c perl-http-daemon: Update to 6.06
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:03 -07:00
Rosen Penev 308b9fedfe perl-http-cookies: Update to 6.04
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:02 -07:00
Rosen Penev 36b6d15f70 perl-html-form: Update to 6.04
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:02 -07:00
Rosen Penev 03656dfea6 perl-file-sharedir-install: Update to 0.13
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:02 -07:00
Rosen Penev a3d40c56a3 perl-dbi: Update to 1.642
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:02 -07:00
Rosen Penev a572df4e1b perl-compress-bzip: Update to 2.26
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:01 -07:00
Rosen Penev 6aa0cfb2e5 perl-cgi: Update to 4.44
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-05 12:22:01 -07:00
Jeffery To a3be5cfa92 python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 23:54:46 +08:00
Jeffery To 47d6d8e514 python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:40:25 +08:00
Michael Heimpold f14a76253a Merge pull request #10126 from stefaang/php7-mod-gd
php7-mod-gd: enable libwebp
php7: bump to 7.2.23
2019-10-03 14:32:46 +02:00
Stefaan Ghysels dacda44755 php7: bump to 7.2.23
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
2019-10-03 13:44:23 +02:00
Stefaan Ghysels 84a449440a php7-mod-gd: enable libwebp
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
2019-10-03 13:42:38 +02:00
Rosen Penev d2df36bbb0 vala: Update to 0.46.2
Removed inactive maintainer.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-10-02 15:15:00 -07:00
Rosen Penev 15dfcc3611 Merge pull request #10121 from BKPepe/werkzeug
Werkzeug: Update to version 0.16.0
2019-10-02 12:37:06 -07:00
Rosen Penev 0d3d4ca894 Merge pull request #10122 from BKPepe/flask
Flask: Update to version 1.1.1
2019-10-02 12:36:11 -07:00
Josef Schlehofer 1ccf2377fc python3-maxminddb: Update to version 1.5.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-01 00:38:47 +02:00
Josef Schlehofer 19e12971b8 Flask: Update to version 1.1.1
- Change TITLE and URL to better one
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-01 00:21:42 +02:00
Josef Schlehofer 267796c316 Werkzeug: Update to version 0.16.0
- Remove PKG_BUILD_DEPENDS as it is no longer necessary.
- The Python3 is already included in DEPENDS.
- Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version.
- Change TITLE and description
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-01 00:15:35 +02:00
Josef Schlehofer 144c8da84a python-pyrsistent: Update to version 0.15.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-30 21:22:35 +02:00
Josef Schlehofer 80def9e653 python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-29 23:18:29 +02:00
Josef Schlehofer 65b7bd6cc0 golang: Update to version 1.13.1
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-29 00:53:05 +02:00
Rosen Penev 014ebb2f16 Merge pull request #10083 from BKPepe/sentrysdk
python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:09 -07:00
Rosen Penev b72cbb7e2c Merge pull request #10092 from ysc3839/pycryptodome
python-cryptodome: update to 3.9.0
2019-09-27 12:07:08 -07:00
Rosen Penev ccd2b767d9 jamvm: Don't compile on ARM64
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-27 10:09:44 -07:00
Alexander Ryzhov 7910715d86 perl-www-curl: curl 7.66.0 compatibility
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
2019-09-27 15:02:29 +03:00
Richard Yu ad9fe1b60b python-cryptodome: update to 3.9.0
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2019-09-27 17:05:44 +08:00
Josef Schlehofer ff106ae376 python-sentry-sdk: Update to version 0.12.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 18:21:43 +02:00
Josef Schlehofer da51877e7f python-urllib3: Update to version 1.25.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 11:45:40 +02:00
Jan Pavlinec ceadbcbb64 treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-24 13:51:22 +02:00
Alexandru Ardelean 5f9ea76e7a gunicorn: convert to Python packaging format + add Python3 variant
And splitting the gunicorn[3] binary/executable away from the
python[3]-gunicorn libraries. This was inspired from Debian packaging.

The gunicorn[3] binaries require the new `python[3]-pkg-resources`
libraries to run, which add ~1.1 MB on the [ram]disk when uncompressed.

For the Python2 variant, the `_gaiohttp.py` is dropped as it fails to
compile, so it would likely be unusable anyway:
```
  File "/usr/lib/python2.7/site-packages/gunicorn/workers/_gaiohttp.py", line 84
    yield from self.wsgi.close()
             ^
  SyntaxError: invalid syntax

```

People around the web recommend this as well:
 https://stackoverflow.com/questions/25611140/syntax-error-installing-gunicorn
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803170
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803202

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 14:11:08 +03:00
Alexandru Ardelean 721642908c python,python3: add Py[3]Shebang functions & move outside of script
Some packages just install some Python binaries, that may need their
shebang fixed.
This change adds some utilities to help with that and try to centralize the
sed rules a bit.

It also removes the logic from the `python-package-install.sh` into the
`python-package[3].mk` files. This does 2 things:
1. It minimizes the need for the shell script to know the Python
   version 2/3
2. Makes the logic re-usable in packages; especially if the install rules
   differ a bit

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 14:10:00 +03:00
Alexandru Ardelean ed0e77f3c3 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 13:42:40 +03:00
Alexandru Ardelean b104c56e2b python: change condition check for legacy opt for Python3
As I remember this worked.
But since `set -e` is set, I am a bit paranoid about it. In the sense that
it may fail if `ver` != 3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 13:42:21 +03:00
Eneas U de Queiroz acf7c540ca python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-09-19 14:30:35 -03:00
Rosen Penev 64a02079da django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-18 14:40:47 -07:00
Jan Pavlinec 299e5b0a9b treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00