git.openwrt.org Git - feed/packages.git/commit

author	Jeffery To <jeffery.to@gmail.com>
	Thu, 16 Mar 2023 07:05:35 +0000 (15:05 +0800)
committer	Jeffery To <jeffery.to@gmail.com>
	Thu, 16 Mar 2023 07:05:35 +0000 (15:05 +0800)
commit	509f4e2f838952bd0322597a9b677ead283c98d1
tree	8af0db8fa8abce1e38f5109a68a1f7bbbc68b24a	tree \| snapshot
parent	35667c546eb76f8fab0ec6c4f3dcc51d213979c7	commit \| diff

python3: Update to 3.7.16, refresh patches

Includes fixes:

* 3.7.14:
  * CVE-2020-10735: Prevent DoS by large int<->str conversions
  * CVE-2021-28861: http.server: Open Redirection if the URL path starts with //

* 3.7.16:
  * CVE-2022-45061: Slow IDNA decoding with large strings
  * CVE-2022-37454: Buffer overflow in the _sha3 module
  * CVE-2015-20107: mailcap.findmatch: document shell command Injection danger in filename parameter

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Mirror of packages feed

RSS Atom

lang/python/python3-version.mk		diff \| blob \| history
lang/python/python3/Makefile		diff \| blob \| history
lang/python/python3/patches/003-do-not-run-distutils-tests.patch		diff \| blob \| history
lang/python/python3/patches/004-do-not-write-bytes-codes.patch		diff \| blob \| history
lang/python/python3/patches/013-getbuildinfo-date-time-source-date-epoch.patch		diff \| blob \| history
lang/python/python3/patches/016-adjust-config-paths.patch		diff \| blob \| history