LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
22901 Commits
1 Branch
46 MiB
Tree: 46b0ed55e3
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '46b0ed55e3'
${ noResults }
openwrt-packages-dist/lang/python/python3/patches-setuptools/003-PKG-INFO-output-reprodu...

14 lines
496 B
Raw Normal View History

python-setuptools: Add reproducibility patches from Debian This adds the ability to patch setuptools (and pip), and adds 3 reproducibility patches from Debian[1]. (003-PKG-INFO-output-reproducible.patch addresses the issue identified in #9039.) The patching is not perfect, in that the patches are applied to setuptools and pip after they have been installed, since they are installed from wheels which are already "precompiled". Also, patching for the host install cannot be updated in place, for example if a patch is added or removed. [1]: https://sources.debian.org/patches/python-setuptools/40.8.0-1/ Signed-off-by: Jeffery To <jeffery.to@gmail.com>
5 years ago
​
​
​
​
python3: Update to 3.8.4, refresh/rework patches, backport patches This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://github.com/python/cpython/pull/20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
4 years ago
python-setuptools: Add reproducibility patches from Debian This adds the ability to patch setuptools (and pip), and adds 3 reproducibility patches from Debian[1]. (003-PKG-INFO-output-reproducible.patch addresses the issue identified in #9039.) The patching is not perfect, in that the patches are applied to setuptools and pip after they have been installed, since they are installed from wheels which are already "precompiled". Also, patching for the host install cannot be updated in place, for example if a patch is added or removed. [1]: https://sources.debian.org/patches/python-setuptools/40.8.0-1/ Signed-off-by: Jeffery To <jeffery.to@gmail.com>
5 years ago
​
​
​
​
​
​
​
 
  1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894215
  2. https://sources.debian.org/patches/python-setuptools/40.8.0-1/PKG-INFO-output-reproducible.diff/
  3. 

  4. --- a/setuptools/dist.py

  5. +++ b/setuptools/dist.py

  6. @@ -193,7 +193,7 @@ def write_pkg_file(self, file):

  7.              self.long_description_content_type
  8.          )
  9.      if self.provides_extras:
  10. -        for extra in self.provides_extras:

  11. +        for extra in sorted(self.provides_extras):

  12.              write_field('Provides-Extra', extra)
  13.  
  14.