Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 1/1] package/python-defusedxml: new package
@ 2020-11-27 14:10 Simon J. Rowe
  2020-12-31 13:35 ` Yann E. MORIN
  0 siblings, 1 reply; 2+ messages in thread
From: Simon J. Rowe @ 2020-11-27 14:10 UTC (permalink / raw)
  To: buildroot

From: Simon Rowe <simon.rowe@citrix.com>

XML bomb protection for Python stdlib modules.

Signed-off-by: Simon Rowe <simon.rowe@citrix.com>
---
 package/Config.in                                |  1 +
 package/python-defusedxml/Config.in              |  6 ++++++
 package/python-defusedxml/python-defusedxml.hash |  5 +++++
 package/python-defusedxml/python-defusedxml.mk   | 14 ++++++++++++++
 4 files changed, 26 insertions(+)
 create mode 100644 package/python-defusedxml/Config.in
 create mode 100644 package/python-defusedxml/python-defusedxml.hash
 create mode 100644 package/python-defusedxml/python-defusedxml.mk

diff --git a/package/Config.in b/package/Config.in
index 016a99ed1a..868c3b00ea 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -942,6 +942,7 @@ menu "External python modules"
 	source "package/python-dataproperty/Config.in"
 	source "package/python-dateutil/Config.in"
 	source "package/python-decorator/Config.in"
+	source "package/python-defusedxml/Config.in"
 	source "package/python-dialog/Config.in"
 	source "package/python-dialog3/Config.in"
 	source "package/python-dicttoxml/Config.in"
diff --git a/package/python-defusedxml/Config.in b/package/python-defusedxml/Config.in
new file mode 100644
index 0000000000..85285da5ec
--- /dev/null
+++ b/package/python-defusedxml/Config.in
@@ -0,0 +1,6 @@
+config BR2_PACKAGE_PYTHON_DEFUSEDXML
+	bool "python-defusedxml"
+	help
+	  XML bomb protection for Python stdlib modules
+
+	  https://pypi.org/project/defusedxml/
diff --git a/package/python-defusedxml/python-defusedxml.hash b/package/python-defusedxml/python-defusedxml.hash
new file mode 100644
index 0000000000..9f9171858b
--- /dev/null
+++ b/package/python-defusedxml/python-defusedxml.hash
@@ -0,0 +1,5 @@
+# md5, sha256 from https://pypi.org/pypi/defusedxml/json
+md5	a59741f675c4cba649de40a99f732897  defusedxml-0.6.0.tar.gz
+sha256	f684034d135af4c6cbb949b8a4d2ed61634515257a67299e5f940fbaa34377f5  defusedxml-0.6.0.tar.gz
+# Locally computed sha256 checksums
+sha256	b80ce9da8c42a1f91079627fbbe2bf27210ae108a0ffe5f077d5b08e076c24c8  LICENSE
diff --git a/package/python-defusedxml/python-defusedxml.mk b/package/python-defusedxml/python-defusedxml.mk
new file mode 100644
index 0000000000..6d2a9aff43
--- /dev/null
+++ b/package/python-defusedxml/python-defusedxml.mk
@@ -0,0 +1,14 @@
+################################################################################
+#
+# python-defusedxml
+#
+################################################################################
+
+PYTHON_DEFUSEDXML_VERSION = 0.6.0
+PYTHON_DEFUSEDXML_SOURCE = defusedxml-$(PYTHON_DEFUSEDXML_VERSION).tar.gz
+PYTHON_DEFUSEDXML_SITE = https://files.pythonhosted.org/packages/a4/5f/f8aa58ca0cf01cbcee728abc9d88bfeb74e95e6cb4334cfd5bed5673ea77
+PYTHON_DEFUSEDXML_SETUP_TYPE = setuptools
+PYTHON_DEFUSEDXML_LICENSE = Python-2.0
+PYTHON_DEFUSEDXML_LICENSE_FILES = LICENSE
+
+$(eval $(python-package))
-- 
2.21.3

^ permalink raw reply related	[flat|nested] 2+ messages in thread
* [Buildroot] [PATCH 1/1] package/python-defusedxml: new package
  2020-11-27 14:10 [Buildroot] [PATCH 1/1] package/python-defusedxml: new package Simon J. Rowe
@ 2020-12-31 13:35 ` Yann E. MORIN
  0 siblings, 0 replies; 2+ messages in thread
From: Yann E. MORIN @ 2020-12-31 13:35 UTC (permalink / raw)
  To: buildroot

Simon, All,

On 2020-11-27 14:10 +0000, Simon J. Rowe spake thusly:
> From: Simon Rowe <simon.rowe@citrix.com>
> 
> XML bomb protection for Python stdlib modules.
> 
> Signed-off-by: Simon Rowe <simon.rowe@citrix.com>

Applied to master, thanks.

Regards,
Yann E. MORIN.

> ---
>  package/Config.in                                |  1 +
>  package/python-defusedxml/Config.in              |  6 ++++++
>  package/python-defusedxml/python-defusedxml.hash |  5 +++++
>  package/python-defusedxml/python-defusedxml.mk   | 14 ++++++++++++++
>  4 files changed, 26 insertions(+)
>  create mode 100644 package/python-defusedxml/Config.in
>  create mode 100644 package/python-defusedxml/python-defusedxml.hash
>  create mode 100644 package/python-defusedxml/python-defusedxml.mk
> 
> diff --git a/package/Config.in b/package/Config.in
> index 016a99ed1a..868c3b00ea 100644
> --- a/package/Config.in
> +++ b/package/Config.in
> @@ -942,6 +942,7 @@ menu "External python modules"
>  	source "package/python-dataproperty/Config.in"
>  	source "package/python-dateutil/Config.in"
>  	source "package/python-decorator/Config.in"
> +	source "package/python-defusedxml/Config.in"
>  	source "package/python-dialog/Config.in"
>  	source "package/python-dialog3/Config.in"
>  	source "package/python-dicttoxml/Config.in"
> diff --git a/package/python-defusedxml/Config.in b/package/python-defusedxml/Config.in
> new file mode 100644
> index 0000000000..85285da5ec
> --- /dev/null
> +++ b/package/python-defusedxml/Config.in
> @@ -0,0 +1,6 @@
> +config BR2_PACKAGE_PYTHON_DEFUSEDXML
> +	bool "python-defusedxml"
> +	help
> +	  XML bomb protection for Python stdlib modules
> +
> +	  https://pypi.org/project/defusedxml/
> diff --git a/package/python-defusedxml/python-defusedxml.hash b/package/python-defusedxml/python-defusedxml.hash
> new file mode 100644
> index 0000000000..9f9171858b
> --- /dev/null
> +++ b/package/python-defusedxml/python-defusedxml.hash
> @@ -0,0 +1,5 @@
> +# md5, sha256 from https://pypi.org/pypi/defusedxml/json
> +md5	a59741f675c4cba649de40a99f732897  defusedxml-0.6.0.tar.gz
> +sha256	f684034d135af4c6cbb949b8a4d2ed61634515257a67299e5f940fbaa34377f5  defusedxml-0.6.0.tar.gz
> +# Locally computed sha256 checksums
> +sha256	b80ce9da8c42a1f91079627fbbe2bf27210ae108a0ffe5f077d5b08e076c24c8  LICENSE
> diff --git a/package/python-defusedxml/python-defusedxml.mk b/package/python-defusedxml/python-defusedxml.mk
> new file mode 100644
> index 0000000000..6d2a9aff43
> --- /dev/null
> +++ b/package/python-defusedxml/python-defusedxml.mk
> @@ -0,0 +1,14 @@
> +################################################################################
> +#
> +# python-defusedxml
> +#
> +################################################################################
> +
> +PYTHON_DEFUSEDXML_VERSION = 0.6.0
> +PYTHON_DEFUSEDXML_SOURCE = defusedxml-$(PYTHON_DEFUSEDXML_VERSION).tar.gz
> +PYTHON_DEFUSEDXML_SITE = https://files.pythonhosted.org/packages/a4/5f/f8aa58ca0cf01cbcee728abc9d88bfeb74e95e6cb4334cfd5bed5673ea77
> +PYTHON_DEFUSEDXML_SETUP_TYPE = setuptools
> +PYTHON_DEFUSEDXML_LICENSE = Python-2.0
> +PYTHON_DEFUSEDXML_LICENSE_FILES = LICENSE
> +
> +$(eval $(python-package))
> -- 
> 2.21.3
> 
> _______________________________________________
> buildroot mailing list
> buildroot at busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'

^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-12-31 13:35 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-11-27 14:10 [Buildroot] [PATCH 1/1] package/python-defusedxml: new package Simon J. Rowe
2020-12-31 13:35 ` Yann E. MORIN

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox