summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
JinWang An [Mon, 26 Apr 2021 07:05:29 +0000 (16:05 +0900)]
[CVE-2020-27619]No longer call eval() on content received via HTTP in the CJK codec tests
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py
CJK codec tests call eval() on content retrieved via HTTP.
Change-Id: I1fe49373b30007f2140a06d74dd21dbd6fd1ea5a
Signed-off-by: JinWang An <jinwang.an@samsung.com>
JinWang An [Mon, 26 Apr 2021 06:35:30 +0000 (15:35 +0900)]
[CVE-2020-8492]Fix AbstractBasicAuthHandler
Python 2.7 through 2.7.17, 3.5 through 3.5.9,
3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1
allows an HTTP server to conduct Regular Expression Denial
of Service (ReDoS) attacks against a client
because of urllib.request.AbstractBasicAuthHandler
catastrophic backtracking.
Change-Id: I7f0232cba39309a35fc262817286dcdae81f537a
Signed-off-by: JinWang An <jinwang.an@samsung.com>
JinWang An [Mon, 26 Apr 2021 05:19:00 +0000 (14:19 +0900)]
[CVE-2020-8315]Avoid unsafe DLL load on Windows 7 and earlier
In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6,
and 3.8 through 3.8.1, an insecure dependency load upon
launch on Windows 7 may result in an attacker's copy of
api-ms-win-core-path-l1-1-0.dll being loaded and used
instead of the system's copy. Windows 8 and later are unaffected.
Change-Id: I18d6f2a1e6181232bd349041d26fb34b3070fa8f
Signed-off-by: JinWang An <jinwang.an@samsung.com>
JinWang An [Mon, 26 Apr 2021 04:34:30 +0000 (13:34 +0900)]
[CVE-2020-26116]Prevent header injection in http methods
reject control chars in http method in http.client.putrequest
to prevent http header injection
Change-Id: I0f9d8bef27edd867a631aed06147f4d1f01b0c7b
Signed-off-by: JinWang An <jinwang.an@samsung.com>
jpic [Wed, 17 Jul 2019 21:54:25 +0000 (23:54 +0200)]
[CVE-2019-16056] bpo-34155: Dont parse domains containing @ (GH-13079)
Before:
>>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
(Address(display_name='', username='a', domain='malicious.org'),)
>>> parseaddr('a@malicious.org@important.com')
('', 'a@malicious.org')
After:
>>> email.message_from_string('From: a@malicious.org@important.com', policy=email.policy.default)['from'].addresses
(Address(display_name='', username='', domain=''),)
>>> parseaddr('a@malicious.org@important.com')
('', 'a@')
https://bugs.python.org/issue34155
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Change-Id: I41cc6ee702cfce07f655d768bb02dbc21e8bd23a
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 17 Feb 2020 00:15:45 +0000 (09:15 +0900)]
Remove gcc_version macro at spec file
Change-Id: Ib98e38df052d0fb3bd36094dc10dfef91407604c
DongHun Kwak [Wed, 29 Jan 2020 04:37:21 +0000 (13:37 +0900)]
Removed duplicate plugin
Removed _contextvars, _queue, _xxtestfuzz at python3.spec file
Change-Id: If29af278f69702b63fb959ba382d13189d15594e
DongHun Kwak [Wed, 25 Dec 2019 22:48:50 +0000 (07:48 +0900)]
Fix build error
Add gcc version check logic for nis.so
Change-Id: I219efe371a1d978eafc8ec95460260f327ec9ff3
Donghun Kwak [Mon, 23 Dec 2019 23:01:26 +0000 (23:01 +0000)]
Merge "[Tizen 6.0] Enable build" into tizen_base
Mikhail Kashkarov [Mon, 2 Dec 2019 17:53:32 +0000 (20:53 +0300)]
[Tizen 6.0] Enable build
The NIS(+) name service modules are deprecated since glibc 2.27 and will not be
built or installed by default.
Change-Id: I86e09eb4952baf6018551f31c4ddd479d8681d38
Signed-off-by: Mikhail Kashkarov <m.kashkarov@partner.samsung.com>
DongHun Kwak [Wed, 14 Aug 2019 07:26:24 +0000 (16:26 +0900)]
Migrate to openssl 1.1
Change-Id: I50854134a4fb35702fb70609d1e01ba8e2e976f1
DongHun Kwak [Wed, 14 Aug 2019 07:01:07 +0000 (16:01 +0900)]
Fix build error at 64bit env
Change-Id: I8c347a708ff924ff925831dc3d9a3c54f5427ba2
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Wed, 5 Jun 2019 07:05:20 +0000 (16:05 +0900)]
Change lib path "/usr/lib" -> "/usr/lib64" at 64bit env
python3 crashed at 64bit env
================================================================
Could not find platform independent libraries <prefix>
Could not find platform dependent libraries <exec_prefix>
Consider setting $PYTHONHOME to <prefix>[:<exec_prefix>]
Fatal Python error: initfsencoding: unable to load the file system codec
ModuleNotFoundError: No module named 'encodings'
================================================================
Change-Id: Id76694616dfc53cec7547619c6931cb7a47be0a8
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Hyunjee Kim [Mon, 27 May 2019 07:02:37 +0000 (16:02 +0900)]
Bump to python3 3.7.3
Change-Id: I542171cd4a0e64b179208d1be5fccdf0d67d517d
Signed-off-by: Hyunjee Kim <hj0426.kim@samsung.com>
Hyunjee Kim [Thu, 23 May 2019 07:34:02 +0000 (16:34 +0900)]
Merge branch 'tizen_base' of ssh://review.tizen.org:29418/platform/upstream/python3 into tizen_base
Change-Id: I0b17475f606d1a12f8b0a0e996ca7186b79182a3
Signed-off-by: Hyunjee Kim <hj0426.kim@samsung.com>
MyoungJune Park [Thu, 4 Feb 2016 01:31:57 +0000 (10:31 +0900)]
Rebase for python3 3.7.3
Change-Id: I9bb1313d173a3113ba7ac6c648aa74b05b49a853
Signed-off-by: Hyunjee Kim <hj0426.kim@samsung.com>
Hyunjee Kim [Thu, 23 May 2019 06:39:18 +0000 (15:39 +0900)]
Imported Upstream version 3.7.3
Hyunjee Kim [Wed, 20 Mar 2019 03:05:24 +0000 (12:05 +0900)]
Imported Upstream version 3.7.2
Hyunjee Kim [Wed, 20 Mar 2019 03:03:49 +0000 (12:03 +0900)]
Imported Upstream version 3.7.1
Hyunjee Kim [Wed, 20 Mar 2019 02:01:58 +0000 (11:01 +0900)]
Imported Upstream version 3.7.0
Hyunjee Kim [Wed, 20 Mar 2019 02:00:31 +0000 (11:00 +0900)]
Imported Upstream version 3.6.8
Hyunjee Kim [Wed, 20 Mar 2019 01:58:57 +0000 (10:58 +0900)]
Imported Upstream version 3.6.7
Hyunjee Kim [Wed, 20 Mar 2019 01:55:20 +0000 (10:55 +0900)]
Imported Upstream version 3.6.6
Hyunjee Kim [Wed, 20 Mar 2019 01:53:40 +0000 (10:53 +0900)]
Imported Upstream version 3.6.5
Hyunjee Kim [Wed, 20 Mar 2019 01:52:04 +0000 (10:52 +0900)]
Imported Upstream version 3.6.4
DongHun Kwak [Mon, 23 Apr 2018 05:49:03 +0000 (14:49 +0900)]
Fix build error
Patch for ncurses 6.0
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] build error at ncureses 6.0
[Cause & Measure] WINDOWS symbol error, Add Macro at cflag
[Checking Method] build test
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: I91a99c08295e15258109554b669a58f2b3676b10
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Denis Khalikov [Tue, 27 Feb 2018 11:24:58 +0000 (14:24 +0300)]
[ASan] Disable asan's alternative stack.
Disable asan's alternative stack for the signal handlers.
I have faced the situation when asan tries to unmap altenative
stack's memory, which was already unmaped, perhaps by updated python.
Change-Id: I48d92e128b850fa28879c6908924c773398456c2
MyoungJune Park [Fri, 19 Jan 2018 02:44:06 +0000 (02:44 +0000)]
Merge "Fix macro.python script" into tizen_base
DongHun Kwak [Fri, 19 Jan 2018 02:35:07 +0000 (11:35 +0900)]
Fix macro.python script
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] missing python3_sitelib macro
[Cause & Measure] macro policy is changed at python 3.6
i fix spec file for using old python macro policy
[Checking Method]
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: Ibb249a709c261bed9ce6bc35adedb73ffcd38990
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
MyoungJune Park [Thu, 18 Jan 2018 23:58:22 +0000 (23:58 +0000)]
Merge "Check unit test" into tizen_base
DongHun Kwak [Wed, 17 Jan 2018 06:41:16 +0000 (15:41 +0900)]
Check unit test
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] python3 unit test is wrong.
[Cause & Measure] some unit test is pending.
[Checking Method] skip unit test
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: I7043fca5c44600aac5184729b6c64c6f3a2e81cd
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Youngjae Shin [Wed, 17 Jan 2018 05:29:58 +0000 (14:29 +0900)]
disable %check section
Change-Id: I84ae8864c83bf5e9cfc26d75ec2fe411b94ea20e
DongHun Kwak [Wed, 13 Dec 2017 01:58:09 +0000 (10:58 +0900)]
Fix build error
nothing provides python-rpm-macros needed by python3-base
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] build dependency problem
[Cause & Measure] remove python-rpm-macros dependency
[Checking Method] build test
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: I3452ed94d2e3ace471ffbf74a9ba623bf7517e54
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Thu, 7 Dec 2017 04:15:53 +0000 (13:15 +0900)]
Bump to python3 3.6.3
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] version upgrade
[Cause & Measure] python3 3.4.4 -> 3.6.3
[Checking Method] python regrssion test
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: Ia788e1dc9e10a7f1af7fd54196da729f609f29ae
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Thu, 7 Dec 2017 02:28:15 +0000 (11:28 +0900)]
Merge branch 'tizen_base' of ssh://review.tizen.org:29418/platform/upstream/python3 into tizen_base
Change-Id: I1ed6c426d8fe80905c03e00ceccb794012200a01
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
MyoungJune Park [Thu, 4 Feb 2016 01:31:57 +0000 (10:31 +0900)]
Rebase for Python3 3.6.3
Change-Id: I4eddd7ac60ba61cc5007ecf8aa0e75f431da00f2
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 11:05:22 +0000 (20:05 +0900)]
Imported Upstream version 3.6.3
Change-Id: I517f0592d098f9860b48c8a5acf3d9d7a83fe3d0
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 11:04:11 +0000 (20:04 +0900)]
Imported Upstream version 3.6.2
Change-Id: Ib672f0d36e295bb49ce443b7a82b92ae1a5774b1
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 11:03:49 +0000 (20:03 +0900)]
Imported Upstream version 3.6.1
Change-Id: I9e03aba4159efe86bdf19df8a277e6d79af53c4f
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 11:03:16 +0000 (20:03 +0900)]
Imported Upstream version 3.6.0
Change-Id: I22cf884321a13b63f2eeb2e20f9ebef3ab00860e
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 11:02:17 +0000 (20:02 +0900)]
Imported Upstream version 3.5.4
Change-Id: Id4ce80292649159c0159cab585aa21897fcc2345
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 11:00:54 +0000 (20:00 +0900)]
Imported Upstream version 3.5.3
Change-Id: I685b7d4e281e9be9dc892ec65b6982aceb90282b
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 10:59:49 +0000 (19:59 +0900)]
Imported Upstream version 3.5.2
Change-Id: I1c5cb913449d614075dfedca59fc712947af0359
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 10:59:28 +0000 (19:59 +0900)]
Imported Upstream version 3.5.1
Change-Id: I323aeec16b97765c499f0b829700355a72a8e4a8
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 10:59:02 +0000 (19:59 +0900)]
Imported Upstream version 3.5.0
Change-Id: Ib235a6221b1ff52e94e797fd39c549a4d42f0837
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 10:57:18 +0000 (19:57 +0900)]
Imported Upstream version 3.4.7
Change-Id: I8279a01e2a6ec6081e994caa6d0691177c5507dc
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 10:56:56 +0000 (19:56 +0900)]
Imported Upstream version 3.4.6
Change-Id: Ie4ae6130d0009ab511f9747ebba92ae519e8752b
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Mon, 16 Oct 2017 10:56:29 +0000 (19:56 +0900)]
Imported Upstream version 3.4.5
Change-Id: I31435ecc855874ee0c136dd39a0f6d7df18cc43f
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Slava Barinov [Thu, 27 Jul 2017 09:51:37 +0000 (12:51 +0300)]
Add ASan support for Tizen 4.0 toolchain
Change-Id: I11738e58f3265e430fb089a1752a0768d582856f
Signed-off-by: Slava Barinov <v.barinov@samsung.com>
Dongkyun, Son [Tue, 27 Sep 2016 02:17:48 +0000 (11:17 +0900)]
packaging: removed build dependency for gmp-devel
Change-Id: Id9c24f2edc8e2a8ef4466638b78e73a2fcd1a80a
Signed-off-by: Dongkyun, Son <dongkyun.s@samsung.com>
DongHun Kwak [Fri, 3 Jun 2016 00:00:05 +0000 (09:00 +0900)]
Skip pybench test at build
[Model] ALL
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] pybench tested at build time
[Cause & Measure] skip pybench testing
[Checking Method] N/A
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: Icae6bec384073dca3fb2451a643109791d9d74c6
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Thu, 2 Jun 2016 01:13:56 +0000 (10:13 +0900)]
[OSLM-253]Remove patch statement at python-base.spec file
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] Invalid patch statement
[Cause & Measure] python3 build error at only source copy.
[Checking Method] N/A
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: I8a14b71d855c963571ec22da384381c9279edd1b
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Wed, 18 May 2016 01:37:39 +0000 (10:37 +0900)]
Crash python3 running at x86_64
[Model] All
[BinType] AP
[Customer] OPEN
[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A
[Problem] When python excute, python's library loading failed.
[Cause & Measure] At getpath.c, python lib path is hardcoding.
fixed, lib path value set from spec file's defined value.
[Checking Method] running python excute binary.
[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A
Change-Id: Ic23ee87c8b352a013f8736a5b9491ab0deac818a
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Thu, 17 Mar 2016 10:12:54 +0000 (19:12 +0900)]
python provides duplication problem.
- python provide at python2 and python3
Change-Id: Id030798d7aafadc9a49e46fe8236eda3566e4975
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
Chan Lee [Wed, 9 Mar 2016 02:44:20 +0000 (11:44 +0900)]
set include path for ncurses
Change-Id: Ia333ff04aeccfc53c550ccbc1316654a206064aa
Signed-off-by: Chan Lee <chan45.lee@samsung.com>
DongHun Kwak [Fri, 26 Feb 2016 13:01:57 +0000 (22:01 +0900)]
Fix build error
- Install error at aarch64
Change-Id: Id11321d5094de415ec743c18ad6b3629b0e0ed78
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
DongHun Kwak [Thu, 18 Feb 2016 05:39:26 +0000 (14:39 +0900)]
Add python3-base.spec
Change-Id: I386534636f52e38902c7c431938a3bea7a3b86f5
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
MyoungJune Park [Thu, 4 Feb 2016 01:31:57 +0000 (10:31 +0900)]
init packaging
Change-Id: I97dad8d0638a9689d75f9939da7995e0155ec7d0
Signed-off-by: MyoungJune Park <mj2004.park@samsung.com>
MyoungJune Park [Thu, 4 Feb 2016 01:29:45 +0000 (10:29 +0900)]
Imported Upstream version 3.4.4
seonil kim [Wed, 3 Feb 2016 04:49:12 +0000 (20:49 -0800)]
Initial empty repository
projects / platform / upstream / python3.git / log