From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Petazzoni Date: Sun, 20 Oct 2019 15:42:56 +0200 Subject: [Buildroot] [git commit] package/python: security bump to version 2.7.17 Message-ID: <20191020135059.AC67382DFA@busybox.osuosl.org> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net commit: https://git.buildroot.net/buildroot/commit/?id=7df07cb611ce441d37b40ee4133585b323d63b44 branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master This release fixes CVE-2019-9740, CVE-2019-9948, CVE-2019-15903. Adjust 0002-Fix-get_python_inc-for-cross-compilation.patch for 2.7.17. Remove the following patches (now on upstream): * 0035-bpo-35907-CVE-2019-9948-urllib-rejects-local_file-sc.patch * 0036-bpo-36216-Add-check-for-characters-in-netloc-that-no.patch * 0037-3.7-bpo-36216-Only-print-test-messages-when-verbose-.patch * 0038-bpo-36742-Fixes-handling-of-pre-normalization-charac.patch * 0039-bpo-36742-Corrects-fix-to-handle-decomposition-in-us.patch * 0040-2.7-bpo-36742-Fix-urlparse.urlsplit-error-message-fo.patch * 0041-bpo-30458-Disallow-control-chars-in-http-URLs-GH-127.patch Full release details at: https://github.com/python/cpython/blob/v2.7.17/Misc/NEWS.d/2.7.17rc1.rst run-tests results: 10:30:20 TestPython2 Starting 10:30:21 TestPython2 Building 10:37:37 TestPython2 Building done 10:37:47 TestPython2 Cleaning up