| Commit message (Collapse) | Author | Age |
|
|
|
|
|
| |
These tests take-up a bit of space. And they aren't typically needed.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)
CVE-2019-16935 was fixed for python3 in #10109
Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.
[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
|\
| |
| |
| | |
php7-mod-gd: enable libwebp
php7: bump to 7.2.23
|
| |
| |
| |
| | |
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Stefaan Ghysels <stefaang@gmail.com>
|
| |
| |
| |
| |
| |
| | |
Removed inactive maintainer.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \
| | |
| | | |
Werkzeug: Update to version 0.16.0
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- Remove PKG_BUILD_DEPENDS as it is no longer necessary.
- The Python3 is already included in DEPENDS.
- Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version.
- Change TITLE and description
- Add source package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|\ \ \
| | | |
| | | | |
Flask: Update to version 1.1.1
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | | |
- Change TITLE and URL to better one
- Add source package
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|/ /
| |
| |
| | |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| |
| |
| |
| |
| |
| | |
Fixes: CVE-2019-16935
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| |
| |
| |
| |
| |
| | |
Fixes CVE-2019-16276
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|\ \
| | |
| | | |
python-sentry-sdk: Update to version 0.12.2
|
| | |
| | |
| | |
| | | |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|\ \ \
| | | |
| | | | |
python-cryptodome: update to 3.9.0
|
| | |/
| |/|
| | |
| | | |
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
Not supported.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|/ /
| |
| |
| | |
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
|
|/
|
|
| |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
| |
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
And splitting the gunicorn[3] binary/executable away from the
python[3]-gunicorn libraries. This was inspired from Debian packaging.
The gunicorn[3] binaries require the new `python[3]-pkg-resources`
libraries to run, which add ~1.1 MB on the [ram]disk when uncompressed.
For the Python2 variant, the `_gaiohttp.py` is dropped as it fails to
compile, so it would likely be unusable anyway:
```
File "/usr/lib/python2.7/site-packages/gunicorn/workers/_gaiohttp.py", line 84
yield from self.wsgi.close()
^
SyntaxError: invalid syntax
```
People around the web recommend this as well:
https://stackoverflow.com/questions/25611140/syntax-error-installing-gunicorn
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803170
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803202
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Some packages just install some Python binaries, that may need their
shebang fixed.
This change adds some utilities to help with that and try to centralize the
sed rules a bit.
It also removes the logic from the `python-package-install.sh` into the
`python-package[3].mk` files. This does 2 things:
1. It minimizes the need for the shell script to know the Python
version 2/3
2. Makes the logic re-usable in packages; especially if the install rules
differ a bit
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
This package is required by other packages to run some binaries via
`load_entry_point`.
So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
|
|
|
|
|
|
|
| |
As I remember this worked.
But since `set -e` is set, I am a bit paranoid about it. In the sense that
it may fail if `ver` != 3.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
|
|
|
| |
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes a whole bunchs of CVEs:
CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
| |
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
| |
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.
There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.
[1]: https://golang.org/doc/go1.13#trimpath
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
|\
| |
| | |
php7-pecl-mcrypt: update PKG_LICENSE
|
| |
| |
| |
| |
| |
| | |
Update license tag to latest SPDX format.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
|\ \
| | |
| | | |
php7-pecl-krb5: fix PKG_LICENSE tag
|
| |/
| |
| |
| |
| |
| |
| | |
According to the included license file in the package,
the license is MIT not BSD, so fix it.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
|\ \
| | |
| | | |
vala: Update to 0.46.0
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Switched to using the configure script instead of using make directly.
Added HOST__BUILD_PARALLEL for faster compilation.
Removed target build. It's completely unused.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|\ \ \
| |_|/
|/| | |
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The package on PyPi is named `mysqlclient`.
This should have been named `python-mysqlclient` from the start.
There is a `mysql` package on PyPi already but that's a different
code/package.
Doing this should avoid any future confusion.
There is no good time to do this rename; at least 19.07 has been branched
already and this can go into the next release [in a year or so].
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".
Signed-off-by: Sven Eckelmann <sven@narfation.org>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Also the source package contains a LICENSE file, so
we can refer to it.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
While at, update the SPDX license id to most recent format.
Compile and run tested on mxs platform.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
|
| |/
|/|
| |
| | |
Signed-off-by: Xingwang Liao <kuoruan@gmail.com>
|
|\ \
| | |
| | | |
Voluptuous & Voluptuous Serialize: update to their latest versions
|
| | |
| | |
| | |
| | | |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|