Code

2024.08 updates.#177

Code

Merged

dumol merged 42 commits intomasterchevah/python-package:masterfrom 202407-updateschevah/python-package:202407-updatesCopy head branch name to clipboardNov 25, 2024

+35,462-13,727

Commits

Commits on Jul 25, 2024

• Updated libffi sources to 3.4.6.

  dumol

  committed
  62cd046

• Updated libffi version to build to 3.4.6.

  dumol

  committed
  52dbba7

• Updated zlib sources to 1.3.1.

  dumol

  committed
  25e41b2

• Updated zlib version to build to 1.3.1.

  dumol

  committed
  4da1782

Commits on Jul 26, 2024

• Security updates for OpenSSL 1.1.1w from Ubuntu 20.04.

  dumol

  committed
  66fccb9

Commits on Jul 29, 2024

• Updated SQLite sources and DLLs to 3.46.0.

  dumol

  committed
  97458f6

• Updated SQLite version to build/use to 3.46.0.

  dumol

  committed
  0fd1549

Commits on Jul 31, 2024

• Python hot patches for some CVE issues on all platforms.

  dumol

  committed
  077d6ec

• Adjusted hot fixes to cleanly apply on Windows.

  dumol

  committed
  deaf977

• Patched Python sources for CVE-2022-48560, CVE-2022-48566, CVE-2023-40217.

  dumol

  committed
  a118e7a

• Document today's patching.

  dumol

  committed
  133bafe

• Patched our cryptography sources for CVE-2023-49083. Other safety issues not relevant for our old versions.

  dumol

  committed
  8b3196a

• Patched our cryptography sources for CVE-2023-49083, take two.

  dumol

  committed
  1909628

• Ignore one more safety id for requests: 71064.

  dumol

  committed
  5c55344

• Ignore safety id for one more of its deps: idna.

  dumol

  committed
  7c690ac

Commits on Aug 1, 2024

• Use last compat revision supporting Python 2.7.

  dumol

  committed
  7d4cb1e

• Added more Safety IDs to ignore.

  dumol

  committed
  0e26a7d

• Clone more of compat to reach last revision supporting py27.

  dumol

  committed
  2890e12

• Updated psutil version to build and use to 6.0.0.

  dumol

  committed
  4356e2c

• Try penultimate commit from py2-support branch of compat.

  dumol

  committed
  52935d7

• Deactivate compat tests in GitHub workflows for now.

  dumol

  committed
  340d8d5

• Updated non-containerized workflows.

  dumol

  committed
  618b8d8

• Try latest version to build on CentOS 5.

  dumol

  committed
  cf619db

• Try older psutil version to build on CentOS 5.

  dumol

  committed
  a348029

• Try building ARM64 Linux package on macOS.

  dumol

  committed
  3bc5bef

• No Docker on GitHub's Apple Silicon macOS runners.

  dumol

  committed
  4abf06c

• Properly set an older psutil version to build on generic Linux.

  dumol

  committed
  8f0df95

• Try psutil version 5.9.6 on CentOS 5.

  dumol

  committed
  cbd3a08

• Try bulding Ubuntu 18.04 package in a container.

  dumol

  committed
  bab3981

• Try bulding Ubuntu 18.04 package in a container, take two.

  dumol

  committed
  f540db2

• Try bulding Ubuntu 18.04 package in a container, take three.

  dumol

  committed
  4a3120a

Commits on Aug 15, 2024

• Patched our Python sources for CVE-2024-0397.

  dumol

  committed
  0a58cdb

• Patched our OpenSSL 1.1.1 sources for CVE-2024-2511, CVE-2024-4741, CVE-2024-5535.

  dumol

  committed
  80735e7

• Updated OpenSSL 1.1.1 version to build to 1.1.1w-chevah2.

  dumol

  committed
  fff9f22

Commits on Aug 16, 2024

• Patch CVE-2023-49083 for cryptography 3.2.1 the same way as for CVE-2023-23931.

  dumol

  committed
  c01cfef

• More changes after own review.

  dumol

  committed
  4a73fb1

• Updated documented external deps sheets.

  dumol

  committed
  83ac949

Commits on Aug 20, 2024

• Cosmetic changes for external deps sheets.

  dumol

  committed
  bc14df6

• More changes after own review.

  dumol

  committed
  59929ef

Commits on Sep 9, 2024

• Fix CVE-2024-7592 for Python.

  dumol

  committed
  24221b4

• Fix CVE-2024-7592 for Python, take two.

  dumol

  committed
  7832120

Commits on Nov 25, 2024

• Actually remove compat tests GitHub workflows.

  dumol

  committed
  6962bb9