Replaced DTLS patch with upstreamed one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Addresses issue from here:
  https://github.com/openwrt/packages/issues/7367#issuecomment-437685598

The SSL module in Python doesn't handle properly all the combinations of
NPN between all OpenSSL & LibreSSL versions.
This patch fixes this.
Also pushed a report & proposal upstream to Python:
  https://bugs.python.org/issue35264

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Fixes several CVEs.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to a proper URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Apparently := doesn't work here. Why it doesn't should be investigated but for now fix it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to pypi for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch URL to a deterministic one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update URL to a deterministic one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Django 1.11 and above needs pytz to run properly. This was causing issues
with seahub, whose Makefile uses django-admin to compile locales.

Also removed InstallDev. It tried to accomplish the same thing but ended
up installing to the same directories anyways.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Most interesting: Use newer CPython API on Python 3, resulting in a 1.5x speedup.

Switched to a standard URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a proper one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a sensible one.

Some Makefile rearrangements for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

When installing a newer host Go, be sure to remove the old host Go. Not
doing so causes errors[1] when trying to build target Go.

[1]: https://github.com/openwrt/packages/pull/7194#issuecomment-435948361

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Fixed a race condition in QuerySet.update_or_create() that could result in data loss (#29499).

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This change bumps Python3 version to 3.7.1.
Patch `002-fix-implicit-dh-free-declaration.patch` is now included in
upstream.
This also fixes CVE-2018-1061.
   https://www.cvedetails.com/cve/CVE-2018-1061/

Compile & run-tested on x86.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Building would not work for packages that depended on this when the
build directory was deleted after compiled, so they failed when
BUILDBOT=y.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Arnaud Sautaux <arnaud.sautaux@infoteam.ch>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Switched URL to a sensical version.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Easier to bump the version as well.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to pythonhosted for consistency between packages.

Small reorganization.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fix only release, including:
* CVE-2018-16396: Tainted flags are not propagated in Array#pack
  and String#unpack with some directives
* CVE-2018-16395: OpenSSL::X509::Name equality check does not work
  correctly

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Buildbots are currently breaking because of this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Vadim Radovel <vadim@radovel.ru>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Remove dependency on glibc in 010-musl-compat patch as glibc does not
support _LIB_VERSION anymore in 2.27; see
https://sourceware.org/ml/libc-announce/2018/msg00000.html

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

Go 1.11 added softfloat support for 64-bit MIPS systems[1], so this also
adds builds for mips64 and mips64el.

[1] https://golang.org/doc/go1.11#mips

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

CVE-2013-7459 and CVE-2018-6594. Both patches taken from Fedora.

Also took the liberty to update the PKG_SOURCE_URL to a standard one.

Updated the home URL as well.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add -rpath linker option to host build, pointing to staging/hostpkh/lib.
It's needed to find the correct host libs during runtime, without it the
hosts libs may be used instaead, causing failures.

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>

The linker option -rpath is required to find libs in staging_dir. Now it
is included when building host modules. Without it the import test of
the _ctypes and _uuid modules would fail. The _ctypes module uses
libffi.so.6 from staging, but OpenSUSE LEAP 15 has libffi.so.7.
It will also fail on LEAP 42.x, Fedora28 and 29 and future or old
versions of Ubuntu.

Fix needed in master and 18.06 branches.

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>

Switched to codeload tarballs. Simpler Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to normal tarballs for simplicity. Also rearanged Makefile.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>