From patchwork Fri Nov 27 14:10:38 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Simon J. Rowe" X-Patchwork-Id: 1407236 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.136; helo=silver.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=mose.org.uk Received: from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4CjH5W5SZrz9sSf for ; Sat, 28 Nov 2020 01:27:27 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by silver.osuosl.org (Postfix) with ESMTP id 349162E30E; Fri, 27 Nov 2020 14:27:26 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from silver.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24v0bIXnIxba; Fri, 27 Nov 2020 14:27:22 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by silver.osuosl.org (Postfix) with ESMTP id 4FB712E307; Fri, 27 Nov 2020 14:27:22 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) by ash.osuosl.org (Postfix) with ESMTP id D72BD1BF288 for ; Fri, 27 Nov 2020 14:27:20 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id D38C2879EA for ; Fri, 27 Nov 2020 14:27:20 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id caTiCe3FdJX6 for ; Fri, 27 Nov 2020 14:27:19 +0000 (UTC) X-Greylist: delayed 00:16:27 by SQLgrey-1.7.6 Received: from balrog.mythic-beasts.com (balrog.mythic-beasts.com [46.235.227.24]) by hemlock.osuosl.org (Postfix) with ESMTPS id B39F9879E8 for ; Fri, 27 Nov 2020 14:27:19 +0000 (UTC) Received: from [77.107.158.57] (port=45052 helo=eden.mose.org.uk) by balrog.mythic-beasts.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92.3) (envelope-from ) id 1kieSZ-0006UL-2G; Fri, 27 Nov 2020 14:10:51 +0000 Received: from gilraen.mose.org.uk (gilraen.mose.org.uk [192.168.1.1]) (Authenticated sender: srowe) by eden.mose.org.uk (Postfix) with ESMTPA id 41CFD80084; Fri, 27 Nov 2020 14:10:43 +0000 (GMT) From: "Simon J. Rowe" To: buildroot@buildroot.org Date: Fri, 27 Nov 2020 14:10:38 +0000 Message-Id: <20201127141038.30065-1-srowe@mose.org.uk> X-Mailer: git-send-email 2.21.3 MIME-Version: 1.0 X-BlackCat-Spam-Score: 50 Subject: [Buildroot] [PATCH 1/1] package/python-defusedxml: new package X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Simon Rowe , Thomas Petazzoni , Asaf Kahlon Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" From: Simon Rowe XML bomb protection for Python stdlib modules. Signed-off-by: Simon Rowe --- package/Config.in | 1 + package/python-defusedxml/Config.in | 6 ++++++ package/python-defusedxml/python-defusedxml.hash | 5 +++++ package/python-defusedxml/python-defusedxml.mk | 14 ++++++++++++++ 4 files changed, 26 insertions(+) create mode 100644 package/python-defusedxml/Config.in create mode 100644 package/python-defusedxml/python-defusedxml.hash create mode 100644 package/python-defusedxml/python-defusedxml.mk diff --git a/package/Config.in b/package/Config.in index 016a99ed1a..868c3b00ea 100644 --- a/package/Config.in +++ b/package/Config.in @@ -942,6 +942,7 @@ menu "External python modules" source "package/python-dataproperty/Config.in" source "package/python-dateutil/Config.in" source "package/python-decorator/Config.in" + source "package/python-defusedxml/Config.in" source "package/python-dialog/Config.in" source "package/python-dialog3/Config.in" source "package/python-dicttoxml/Config.in" diff --git a/package/python-defusedxml/Config.in b/package/python-defusedxml/Config.in new file mode 100644 index 0000000000..85285da5ec --- /dev/null +++ b/package/python-defusedxml/Config.in @@ -0,0 +1,6 @@ +config BR2_PACKAGE_PYTHON_DEFUSEDXML + bool "python-defusedxml" + help + XML bomb protection for Python stdlib modules + + https://pypi.org/project/defusedxml/ diff --git a/package/python-defusedxml/python-defusedxml.hash b/package/python-defusedxml/python-defusedxml.hash new file mode 100644 index 0000000000..9f9171858b --- /dev/null +++ b/package/python-defusedxml/python-defusedxml.hash @@ -0,0 +1,5 @@ +# md5, sha256 from https://pypi.org/pypi/defusedxml/json +md5 a59741f675c4cba649de40a99f732897 defusedxml-0.6.0.tar.gz +sha256 f684034d135af4c6cbb949b8a4d2ed61634515257a67299e5f940fbaa34377f5 defusedxml-0.6.0.tar.gz +# Locally computed sha256 checksums +sha256 b80ce9da8c42a1f91079627fbbe2bf27210ae108a0ffe5f077d5b08e076c24c8 LICENSE diff --git a/package/python-defusedxml/python-defusedxml.mk b/package/python-defusedxml/python-defusedxml.mk new file mode 100644 index 0000000000..6d2a9aff43 --- /dev/null +++ b/package/python-defusedxml/python-defusedxml.mk @@ -0,0 +1,14 @@ +################################################################################ +# +# python-defusedxml +# +################################################################################ + +PYTHON_DEFUSEDXML_VERSION = 0.6.0 +PYTHON_DEFUSEDXML_SOURCE = defusedxml-$(PYTHON_DEFUSEDXML_VERSION).tar.gz +PYTHON_DEFUSEDXML_SITE = https://files.pythonhosted.org/packages/a4/5f/f8aa58ca0cf01cbcee728abc9d88bfeb74e95e6cb4334cfd5bed5673ea77 +PYTHON_DEFUSEDXML_SETUP_TYPE = setuptools +PYTHON_DEFUSEDXML_LICENSE = Python-2.0 +PYTHON_DEFUSEDXML_LICENSE_FILES = LICENSE + +$(eval $(python-package))