summaryrefslogtreecommitdiff
path: root/pkgs/development/interpreters/python/cpython
AgeCommit message (Collapse)Author
2023-01-16python37: remove leftover filesNick Cao
2023-01-15Merge pull request #210078 from thiagokokada/dont-expose-resholveThiago Kenji Okada
resholve: mark it as knownVulnerabilities, allow resholve-utils usage
2023-01-15python27: remove stripLibs argumentThiago Kenji Okada
Since we are now guarantee that the `resholve` is not exposing `python27`, let's remove the `stripLibs` hack that tried to reduce its size.
2023-01-13Merge master into staging-nextgithub-actions[bot]
2023-01-12Merge pull request #208744 from wegank/python312-darwinMario Rodas
python312: fix build on darwin
2023-01-08python311: fix cross compilationNick Cao
2023-01-08Merge master into staging-nextgithub-actions[bot]
2023-01-07python27: mark as vulnerable/insecure due to EOL on 2020-01-01Fabián Heredia Montiel
More information: https://www.activestate.com/products/python/python-2-end-of-life-security-updates/
2023-01-05Merge remote-tracking branch 'origin/master' into staging-nextMartin Weinelt
2023-01-05python37: dropMartin Weinelt
The package set hasn't been working for a long time now, due to infinite recursions, that nobody was going to fix. The release is going to go EOL in 2023/06 and we don't want to ship it in NixOS 23.05 anyway.
2023-01-04python27: 2.7.18.5 -> 2.7.18.6Thiago Kenji Okada
2023-01-04Merge staging-next into staginggithub-actions[bot]
2023-01-02python312: fix build on darwinWeijia Wang
2023-01-01python3: allow enabling framework on darwinWeijia Wang
2022-12-18python27: use ffi/expat as system librariesThiago Kenji Okada
Without `--with-system-{ffi,expat}` flags, Python will use its own embedded libraries that are out-of-date. Thanks to it, they can be a security issue. So let's use our own libraries instead. This is already what Python 3.x does, so should be safe.
2022-12-17Merge staging-next into staginggithub-actions[bot]
2022-12-17Merge master into staging-nextgithub-actions[bot]
2022-12-15resholve: strip unused libraries from python27Thiago Kenji Okada
Strip unused libraries from resholve's own python27 derivation, further reducing its size and reducing its attack surface.
2022-12-13Merge staging-next into staginggithub-actions[bot]
2022-12-13Merge master into staging-nextgithub-actions[bot]
2022-12-13resholve: use stripped-down python27Thiago Kenji Okada
This PR strips down the modified `python27` derivation used by `resholve`. The idea is to reduce the possible security issues, and also to make it easier to bootstrap.
2022-12-12Merge staging-next into staginggithub-actions[bot]
2022-12-12python311: revert asyncio changes done in 3.11.1Vladimír Čunát
Almost same as in the parent commit.
2022-12-12python310: revert asyncio changes done in 3.10.9Vladimír Čunát
They brought significant regressions. Upstream is now discussing what to do, but we still want the security fixes from 3.10.9.
2022-12-10Merge pull request #175649 from Artturin/opt-in-structured-attrsRobert Hensing
stdenv: support opt-in __structuredAttrs
2022-12-09Merge branch 'staging-next' into stagingVladimír Čunát
2022-12-08treewide: fix some core package structuredAttrsArtturin
2022-12-07cpython: Update meta and add changelog urlMartin Weinelt
2022-12-02cpython: Restore libxcrypt CFLAGS and LIBS in configureFlagsMartin Weinelt
2022-11-29python312: init at 3.12.0a2Martin Weinelt
https://blog.python.org/2022/10/python-3120-alpha-1-released.html https://blog.python.org/2022/11/python-3120-alpha-2-released.html
2022-11-29cpython: drop leftover 3.5/3.6 logic and patchesMartin Weinelt
2022-11-28python27: fix CVE-2021-3733Thiago Kenji Okada
2022-11-28python27: add thiagokokada as maintainerThiago Kenji Okada
2022-11-28python27: switch to ActiveState's fork for Python 2Thiago Kenji Okada
ActiveState is a company that is maintaining a fork of Python 2 to fixes its security issues. Their support is paid, however the code is open-source. See the details here: https://www.activestate.com/products/python/python-2-end-of-life-security-updates/ This enable us to drop a bunch of CVE's patches for Python 2.7 and also it should be easier to maintain, since we can just bump the version once ActiveState tags a new version.
2022-11-28Merge pull request #203362 from thiagokokada/add-patches-to-python27-cvesMartin Weinelt
2022-11-27python27: add patches for known security issuesThiago Kenji Okada
Add patches from Arch Linux package (that itself source its patches from Gentoo) to the following known security issues in Python 2.7: - CVE-2020-26116 - CVE-2020-27619 - CVE-2020-8492 This should cover all security issues currently listed in https://www.activestate.com/products/python/python-2-end-of-life-security-updates/.
2022-11-21python3: use openssl_legacyajs124
2022-11-21Revert "Revert "python3: pin to openssl_1_1""ajs124
This reverts commit 017fd895276dc0e45e9a596b1aa1ad199bfc7c4d.
2022-11-11Merge pull request #196906 from helsinki-systems/feat/less-openssl_1_1Lassulus
2022-10-30pythonFull: drop unused xlibsWrapper inputSergei Trofimovich
Tested as no material change in `out` output with `diffoscope`.
2022-10-28Revert "python3: pin to openssl_1_1"ajs124
This reverts commit 8dfc998207dca2e2928cd1f204e4f37444aa40a6.
2022-10-10treewide: optional -> optionals where the argument is a listArtturin
the argument to optional should not be list
2022-10-09cpython: fix build with libxcryptFranz Pletz
2022-09-29Merge pull request #193528 from cidkidnix/android-cpythJohn Ericson
android: cpython: fix stdenv.cc.cc.libllvm
2022-09-29cpython: fix stdenv.cc.cc.libllvmcidkidnix
2022-09-24pythonDocs: fix evalK900
2022-09-23pythonDocs: bring back pname+version, allow script to be executed from anywhereSandro Jäckel
2022-09-23pythonDocs: 3.7 -> 3.10Spencer Baugh
Also include texinfo docs for Python 3 (they aren't generated for Python 2) A few minor fixes had to be made to generate.sh as well.
2022-08-17python3: pin to openssl_1_1ajs124
2022-08-07setup-hooks/separate-debug-info.sh: don't inhibit strip hookSergei Trofimovich
Before the change separate-debug-info.sh did the stripping itself. This scheme has a few problems: 1. Stripping happens only on ELF files. *.a and *.o files are skipped. Derivations have to do it manually. Usually incorrectly as they don't run $RANLIB (true for `glibc` and `musl`). 2. Stripping happens on all paths. Ideally only `stripDebugList` paths should be considered. 3. Host strip is called on Target files. This change offloads stripping logic to strip hook. This strips more files for `glibc` and `musl`. Now we can remove most $STRIP calls from individual derivations. Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-23 20:44:32 +0000