git.openwrt.org Git - feed/packages.git/commit

author	Jeffery To <jeffery.to@gmail.com>
	Sun, 26 Jul 2020 20:00:15 +0000 (04:00 +0800)
committer	Jeffery To <jeffery.to@gmail.com>
	Sun, 26 Jul 2020 20:33:28 +0000 (04:33 +0800)
commit	7d6fcf20e76fae85af4b7a5bfbed077f2f609d81
tree	5911de768481163311482a989389a8c8fc464f5f	tree \| snapshot
parent	3d4bf8cb31b26a46ae85a74c4450ed0415510e3b	commit \| diff

python3: Update to 3.8.5

This version includes fixes for:
* CVE-2020-15801 - Fixes python3x._pth being ignored on Windows
* CVE-2019-20907 - Avoid infinite loop when reading specially crafted
TAR files using the tarfile module

This also:
* Remove patches that are included in the update
* Add a dependency in python3-distutils for python3-email[1]

[1]: https://github.com/python/cpython/blob/v3.8.5/Lib/distutils/dist.py#L10

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Mirror of packages feed

RSS Atom

lang/python/python3-version.mk		diff \| blob \| history
lang/python/python3/Makefile		diff \| blob \| history
lang/python/python3/files/python3-package-distutils.mk		diff \| blob \| history
lang/python/python3/patches/025-bpo-41288-Fix-a-crash-in-unpickling-invalid-NEWOBJ_EX-GH-21458.patch	[deleted file]	blob \| history
lang/python/python3/patches/026-bpo-39017-Avoid-infinite-loop-in-the-tarfile-module-GH-21454-GH-21483.patch	[deleted file]	blob \| history
lang/python/python3/patches/027-bpo-39603-Prevent-header-injection-in-http-methods-GH-18485.patch	[deleted file]	blob \| history