cubixle/packages
1
0
Fork 0
mirror of https://github.com/novatiq/packages.git synced 2026-07-26 05:26:05 +01:00
Code Issues Packages Projects Releases Wiki Activity
15,590 Commits 8 Branches 1 Tag
248c3d01faedbc17bdbcb026c78f0d9d57037cf0
Commit Graph
2237 Commits
Author SHA1 Message Date
Jeffery ToandJosef Schlehofer 58ed21040c python,python3: Add PYPI_SOURCE_NAME to pypi.mk 
This adds a new (optional) variable, PYPI_SOURCE_NAME, to pypi.mk.

For some PyPi packages (e.g. aiohttp_cors, click, django-compressor),
the name of the package and the source tarball name are slightly
different (usually by capitalisation or hyphen/underscore change).

This new variable is to make this difference explicit. PYPI_NAME is
meant for the "official" package name, whereas PYPI_SOURCE_NAME is meant
for the source tarball name.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 1bacdd52f7)
 2019-11-02 20:21:46 +01:00
Jeffery ToandJosef Schlehofer 866b42c60e python,python3: Add pypi makefile 
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit add4c42191)
 2019-11-02 19:01:21 +01:00
Alexandru ArdeleanandYousong Zhou 807c557cf9 django: bump to version 1.11.25 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e9e687a1f1)
 2019-10-30 23:16:57 +08:00
Alexandru ArdeleanandJeffery To 4574e8fcb9 python-cffi: bump to version 1.13.1 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from dff2fe2963)
 2019-10-30 05:49:55 +08:00
Luiz Angelo Daros de Luca 702c655874 ruby: update to 2.6.5 
2.6.5 fixes:
* CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test
* CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
* CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
* CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick’s Digest access authentication

2.6.4 fixes:
* Multiple jQuery vulnerabilities in RDoc

Changelog: https://github.com/ruby/ruby/compare/v2_6_3...v2_6_5

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit d3d0c28149)
 2019-10-27 16:09:43 -03:00
Alexandru ArdeleanandJosef Schlehofer f18bc652c7 django-ranged-response: update packaging format + add python3 variant 
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Not updating deps here, since that will be done in the next changeset that
will convert packages to the Python[3] packaging format.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 70ebc7a2f4)
 2019-10-24 21:33:37 +02:00
Josef Schlehofer 629b8fb60e flup: add Python3 variant and src package 
- Add PKG_LICENSE_FILES
- Reorder things in Makefile
- Add dependency python3-logging otherwise I cannot import
flup.server.ajp
flup.server.scgi

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit a5b2ba9b4d)
 2019-10-23 15:34:59 +02:00
Josef Schlehofer 6f392ad0cb django-statici18n: fix changes in merge 2019-10-23 09:16:42 +02:00
Josef Schlehofer c4782e6e8b django-web-pack-loader: fix changes in merge conflict 2019-10-23 09:15:47 +02:00
Eneas U de QueirozandJosef Schlehofer db4cbf71a5 django: move django* packages under django submenu 
This changes the python[3]-django dependencies in packages to be
non-selecting, and adds an MDEPENDS line so that the *-src packages get
placed inside the django menu as well.

Added MENU:= to the src-package definitions in python[3]-package.mk,
so it does not import that setting from the binary package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 90527d75af)
 2019-10-23 01:59:52 +02:00
Alexandru ArdeleanandJosef Schlehofer 19e137162d django-simple-captcha: update packaging format + add python3 variant 
This change also updates the maintainer email to cotequeiroz@gmail.com, as
requested on a different change.

Also, changing here is the download URL to github's codeload, since that
one offers .tar.gz archives.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 545cff8b63)
 2019-10-23 01:57:51 +02:00
Alexandru ArdeleanandJosef Schlehofer b686fa3f48 python-qrcode: update Eneas' email as per prev request 
The email change was part of a previous request from a different PR series.
In this series, the change is the only thing left to do (from what the
original changeset intended to do).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f5eb040e6b)
 2019-10-23 01:55:16 +02:00
Josef Schlehofer 7c48116933 python-qrcode: add Python3 
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 6c7a31ec5e)
 2019-10-23 01:55:00 +02:00
Alexandru ArdeleanandJosef Schlehofer 7257bb05a9 django-restframework: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 441f486081)
 2019-10-23 01:51:26 +02:00
Alexandru ArdeleanandJosef Schlehofer d386164ae7 django-postoffice: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 15272fcc65)
 2019-10-23 01:51:12 +02:00
Alexandru ArdeleanandJosef Schlehofer 2a8c5fe35e django-picklefield: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 6a7f547a38)
 2019-10-23 01:50:56 +02:00
Alexandru ArdeleanandJosef Schlehofer 74f3bf88df django-jsonfield: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 7bbc5131f2)
 2019-10-23 01:50:43 +02:00
Alexandru ArdeleanandJosef Schlehofer 03852aa990 django-formtools: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit e4d8127cae)
 2019-10-23 01:50:29 +02:00
Alexandru ArdeleanandJosef Schlehofer 8df3e1ae45 django-compressor: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 35cddd9b6f)
 2019-10-23 01:50:17 +02:00
Alexandru ArdeleanandJosef Schlehofer c3710fadac django-appconf: update packaging format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 3392fbc6fc)
 2019-10-23 01:50:05 +02:00
Alexandru ArdeleanandJosef Schlehofer dcadf6baac django-constance: convert to python pkg format + add python3 variant 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 1b2936a2d0)
 2019-10-23 01:49:35 +02:00
Alexandru ArdeleanandJosef Schlehofer f8ff5017d2 django: convert to python pkg format + add python3 variant 
This also updates all dependencies to use the new `python-django` package.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit f026dba26e)
 2019-10-23 01:49:15 +02:00
Alexandru Ardeleananddynasticorpheus d735b2be96 python-pillow: bump to version 6.2.0 
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
 2019-10-22 10:54:39 +02:00
Josef SchlehoferdynasticorpheusJeffery To
 		3569a3b029 pillow: add Python3 variant and update to 6.1.0 
- Add @commodo as maintainer

Co-Authored-By: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2019-10-22 10:54:22 +02:00
Jeffery To 18a7c29f55 python: Update to 2.7.17, refresh patches 
Patches already merged and so removed:
* 011-fix-ssl-build-use-have-npn.patch
* 019-bpo-36216-Add-check-for-characters-in-netloc-that-normalize-to-separators-GH-12216.patch
* 020-bpo-36216-Only-print-test-messages-when-verbose-GH-12291.patch
* 021-2.7-bpo-35121-prefix-dot-in-domain-for-proper-subdom.patch
* 022-bpo-30458-Disallow-control-chars-in-http-URLs-GH-13315.patch
* 023-bpo-35907-Avoid-file-reading-as-disallowing-the-unnecessary-URL-scheme-in-urllib-GH-11842.patch
* 027-bpo-38243-Escape-the-server-title-of-DocXMLRPCServer.patch
* 028-bpo-34155-Dont-parse-domains-containing-GH-13079.patch

Patches no longer necessary and so removed:
* 017_lib2to3_fix_pyc_search.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 83b300aa83)
 2019-10-21 23:42:32 +08:00
Josef Schlehofer 0882737b4a python3: Update to version 3.7.5 
setuptools: Updated to version 41.2.0
pip: Updated to version 19.2.3

Removed patches:
- 017: code was refactored
- 02{5,6,7,8}: those patches were backported from upstream and they are
included in 3.7.5

Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2019-10-21 15:19:32 +02:00
Jeffery ToandYousong Zhou d97f776050 python-ipaddress: Update to 1.0.23 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 21858952976aad8ad92cbe76351c5535c39a3f2f)
 2019-10-21 21:10:59 +08:00
Jeffery ToandYousong Zhou 2dfbcb7b99 python-automat: Update to 0.8.0 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 57b4938babc41aa6e80709e4ba29bc6bec6a9472)
 2019-10-21 21:10:38 +08:00
Jeffery ToandYousong Zhou 5e981bfffe python-attrs: Update to 19.3.0 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 8c3f7dcc36a7b8af2069bbbd67cb745ac4b21dec)
 2019-10-21 21:10:14 +08:00
Jeffery ToandJosef Schlehofer b89bf0470d python-cryptography: Update to 2.8 
With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 23f308123c39236c6ceeaa7ffa8ecf18fda29e4d)
 2019-10-21 13:44:25 +02:00
Jeffery ToandJosef Schlehofer bf66776f93 python-cffi: Update to 1.13.0 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 141ead6bd7)
 2019-10-21 13:43:25 +02:00
Josef Schlehofer a1a665c7e2 golang: Update to version 1.13.3 
Fixes CVE-2019-17596

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 10d55f6)
 2019-10-21 03:31:56 +02:00
Jeffery To a0c1c2da6a python-pyasn1-modules: Update to 0.2.7 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from 5848f67e41)
 2019-10-16 02:15:00 +08:00
Rosen PenevandGitHub c6f2699f96 Merge pull request #10183 from jefferyto/python-attrs-19.2.0-openwrt-19.07 
[openwrt-19.07] python-attrs: Update to 19.2.0
 2019-10-09 12:50:28 -07:00
Alexander RyzhovandRosen Penev 3d98d7fd05 perl-www-curl: curl 7.66.0 compatibility 
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry-picked from 7910715d86)
 2019-10-08 14:57:26 -07:00
Jeffery To 863c1a41b4 python-attrs: Update to 19.2.0 
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2019-10-09 05:21:03 +08:00
Jeffery To 18add705fa python,python3: Fix CVE-2019-16056, CVE-2019-16935 
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2019-10-05 00:04:39 +08:00
Jeffery To 1d6436623a python-simplejson: Fix python[3]-decimal dependency 
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
 2019-10-04 22:46:39 +08:00
Eneas U de Queiroz 4bbeb730a5 python-certifi: bump to 2019.9.11 
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit acf7c540ca)
 2019-09-30 16:42:59 -03:00
Josef Schlehofer faf6ec5800 python3: backport three security patches 
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80def9e)
 2019-09-30 10:02:40 +02:00
Rosen PenevandAlexandru Ardelean 33ee8d1ec3 django: Update to 1.11.24 
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 64a02079da)
 2019-09-30 10:27:06 +03:00
Josef Schlehofer f2a06eb9dc golang: Update to version 1.13.1 
Fixes CVE-2019-16276

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 65b7bd6cc0)
 2019-09-29 20:42:52 +02:00
Jeffery ToandJosef Schlehofer 2c829c973b golang: Use new -trimpath option when compiling Go packages 
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry-picked from commit 22ee6e86a0)
 2019-09-29 00:42:22 +02:00
Xingwang LiaoandJosef Schlehofer c7f1bdc592 golang: Update to 1.13 
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
(cherry-picked from commit 0849e32659)
 2019-09-29 00:42:09 +02:00
Hirokazu MORIKAWAandRosen Penev d97123b729 node: fix http/2 DoS 
This is a security release.

Node.js, as well as many other implementations of HTTP/2,
have been found
vulnerable to Denial of Service attacks.
See https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
for more information.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 81bccf9068)
 2019-09-27 12:44:16 -07:00
Hirokazu MORIKAWAandRosen Penev 976fd4e9c1 node: fix host build error on macOS 
fix host build error on macOS
reference: https://github.com/openwrt/packages/issues/9616

Related: https://github.com/openwrt/packages/issues/7171
(This correspondence is necessary to build with macOS.)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from c69d5a0241)
 2019-09-27 12:43:43 -07:00
Rosen PenevandGitHub 5b903f68eb Merge pull request #10084 from BKPepe/sentrysdk-1907 
[OpenWrt 19.07] python-sentry-sdk: Update to version 0.12.2
 2019-09-27 12:09:37 -07:00
Rosen Penev 884c89b5e9 jamvm: Don't compile on ARM64 
Not supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccd2b767d)
 2019-09-27 10:10:33 -07:00
Jan PavlinecandRosen Penev a0d4cc9170 treewide: add PKG_CPE_ID for cvescanner 
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from ceadbcbb64)
 2019-09-26 19:36:27 -07:00
Jan PavlinecandRosen Penev 937b19ebb7 treewide: add PKG_CPE_ID for better cvescanner coverage 
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from bf2f1a0263)
 2019-09-26 19:36:27 -07:00