LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
23433 Commits
1 Branch
46 MiB
Tree: e64d4bd05b
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'e64d4bd05b'
${ noResults }
openwrt-packages-dist/lang/python/python3/patches-setuptools/001-reproducible.patch

16 lines
763 B
Raw Normal View History

python-setuptools: Add reproducibility patches from Debian This adds the ability to patch setuptools (and pip), and adds 3 reproducibility patches from Debian[1]. (003-PKG-INFO-output-reproducible.patch addresses the issue identified in #9039.) The patching is not perfect, in that the patches are applied to setuptools and pip after they have been installed, since they are installed from wheels which are already "precompiled". Also, patching for the host install cannot be updated in place, for example if a patch is added or removed. [1]: https://sources.debian.org/patches/python-setuptools/40.8.0-1/ Signed-off-by: Jeffery To <jeffery.to@gmail.com>
6 years ago
​
​
​
​
​
​
python3: Update to 3.8.4, refresh/rework patches, backport patches This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://github.com/python/cpython/pull/20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
4 years ago
python-setuptools: Add reproducibility patches from Debian This adds the ability to patch setuptools (and pip), and adds 3 reproducibility patches from Debian[1]. (003-PKG-INFO-output-reproducible.patch addresses the issue identified in #9039.) The patching is not perfect, in that the patches are applied to setuptools and pip after they have been installed, since they are installed from wheels which are already "precompiled". Also, patching for the host install cannot be updated in place, for example if a patch is added or removed. [1]: https://sources.debian.org/patches/python-setuptools/40.8.0-1/ Signed-off-by: Jeffery To <jeffery.to@gmail.com>
6 years ago
​
​
​
​
​
​
​
 
  1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848136
  2. https://sources.debian.org/patches/python-setuptools/40.8.0-1/reproducible.diff/
  3. 

  4. Index: b/setuptools/command/easy_install.py

  5. ===================================================================

  6. --- a/setuptools/command/easy_install.py

  7. +++ b/setuptools/command/easy_install.py

  8. @@ -423,7 +423,7 @@ class easy_install(Command):

  9.              for spec in self.args:
  10.                  self.easy_install(spec, not self.no_deps)
  11.              if self.record:
  12. -                outputs = self.outputs

  13. +                outputs = list(sorted(self.outputs))

  14.                  if self.root:  # strip any package prefix
  15.                      root_len = len(self.root)
  16.                      for counter in range(len(outputs)):