<feed xmlns='http://www.w3.org/2005/Atom'>
<title>packages/lang/python/python3/patches/026-openssl-feature-flags.patch, branch master</title>
<subtitle>Mirror of packages feed</subtitle>
<id>https://git-03.infra.openwrt.org/feed/packages/atom?h=master</id>
<link rel='self' href='https://git-03.infra.openwrt.org/feed/packages/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/'/>
<updated>2026-03-20T13:25:40Z</updated>
<entry>
<title>python3: bump to 3.14.3</title>
<updated>2026-03-20T13:25:40Z</updated>
<author>
<name>Alexandru Ardelean</name>
</author>
<published>2026-03-14T17:03:39Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=f22ab5cf660dd124821834ae2028cd25ed8818d0'/>
<id>urn:sha1:f22ab5cf660dd124821834ae2028cd25ed8818d0</id>
<content type='text'>
Major version bump from 3.13.9 to 3.14.3.

Highlights of Python 3.14:
- PEP 649: Deferred evaluation of annotations
- PEP 750: Template string literals (t-strings)
- PEP 758: Exception syntax simplification (no brackets needed)
- PEP 765: Restrict control flow in finally blocks
- PEP 779: Official free-threaded mode support
- PEP 784: Zstandard compression module
- UUID versions 6-8 support with faster generation
- Formally verified HMAC implementation
- Experimental JIT compiler support
- Tail-call interpreter option for performance

Full release notes:
https://www.python.org/downloads/release/python-3143/

Dropped 100-test_hashlib-better-handle-support-for-SHA3.patch (upstreamed)
Adapted 027-fix-host-build-libressl.patch (for
X509_VERIFY_PARAM_get_hostflags() )

Refreshed other patches.

Signed-off-by: Alexandru Ardelean &lt;alex@shruggie.ro&gt;
</content>
</entry>
<entry>
<title>python3: bump to version 3.13.9</title>
<updated>2025-11-08T09:21:38Z</updated>
<author>
<name>Alexandru Ardelean</name>
</author>
<published>2024-11-24T08:59:27Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=97a92f2e7a77c39d087892f5c9a7350c31f3d65b'/>
<id>urn:sha1:97a92f2e7a77c39d087892f5c9a7350c31f3d65b</id>
<content type='text'>
Explicitly disable readline and tkinter modules for host-build.
Host-build will not build if these fail.
  - readline isn't a hard requirement for host-python; some minor lack of
    functionality would be felt, but nothing terrible
  - tkinter is also disabled on the target; but for the host-python we
    don't need it either

Dropped patch: 010-no-ncursesw.patch
  - Since we're disabling readline in the host build

Drop setuptools from python3 - the only reason we kept it there, was
because it was required by pip; pip is still there and seems to install and
work fine without setuptools. There's also a separate setuptools package in
openwrt anyway:
  https://github.com/openwrt/packages/tree/master/lang/python/python-setuptools
Also, Python no longer installs it:
  https://github.com/python/cpython/issues/95299

Drop python3-cgi - https://github.com/python/cpython/commit/08d592389603500af398d278af4842cff6f22c33
Drop distutils - https://github.com/python/cpython/commit/0faa0ba240e815614e5a2900e48007acac41b214
Drop lib2to3 - https://github.com/python/cpython/commit/ae00b810d1d3ad7f1f7e226b02ece37c986330e7

Drop patch: 0001-Adjust-library-header-paths-for-cross-compilation.patch
  - A lot of stuff has changed regarding cross-compilation; at this point
    it's unclear what we need moving forward.

Drop patch: 006-do-not-add-multiarch-local-paths.patch
  - setup.py went away, so no idea if this is needed anymore

Re-applied: 003-do-not-run-compileall.patch

Drop: 008-distutils-use-python-sysroot.patch
  - Buildroot seems to have also dropped this; this patch is from them

Added: 09-don-t-run-profile-task-during-cross-build.patch
  - For cross_compilation, running the profile-task will not work, it also
    mentions this in a comment, but nobody dared to patch it yet (at least
    in this release (3.13.9)

Re-applied: 026-openssl-feature-flags.patch
  - This could have been dropped completely, but upstream decided to keep
    scrypt on by default; for host-build this fails, because OpenWrt keeps
    libressl

Drop patch: 100-gh-95855-Refactor-platform-triplet-detection-code-GH-107221.patch
  - This was a backport; it probably should have been removed sooner

Signed-off-by: Alexandru Ardelean &lt;alex@shruggie.ro&gt;

wip
</content>
</entry>
<entry>
<title>python3: Update to 3.11.5, refresh patches</title>
<updated>2023-09-08T11:01:47Z</updated>
<author>
<name>Jeffery To</name>
</author>
<published>2023-09-05T03:53:41Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=e42c8450393a317ab6df39f6e01411722872fd6b'/>
<id>urn:sha1:e42c8450393a317ab6df39f6e01411722872fd6b</id>
<content type='text'>
Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed
sockets).

This also:

* Remove 027-install-python3-symlink-after-stdlib.patch

  This was merged upstream in
  https://github.com/python/cpython/pull/104693.

* Remove fix for unnecessary linking with libbsd
  (60bf01cb606344619e002901646171da1e69c0f9)

  This was fixed upstream in
  https://github.com/python/cpython/pull/105236.

Signed-off-by: Jeffery To &lt;jeffery.to@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: Fix hashlib module not compiled for host Python</title>
<updated>2023-05-24T03:04:33Z</updated>
<author>
<name>Jeffery To</name>
</author>
<published>2023-05-22T15:26:19Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=02eb5c100c8462823ea19df6af637be97570ccdb'/>
<id>urn:sha1:02eb5c100c8462823ea19df6af637be97570ccdb</id>
<content type='text'>
026-openssl-feature-flags.patch and
028-host-python-support-ssl-with-libressl.patch were removed in
4ecd9d67e90651a8e93760bf0b5771f7057c74a8 to fix the ssl module after
libressl was upgraded to 3.7.0[1].

However, the cause of the ssl module build failure was only
028-host-python-support-ssl-with-libressl.patch.

Removing 026-openssl-feature-flags.patch caused a build failure for the
hashlib module.

This restores 026-openssl-feature-flags.patch with an updated version of
the patch from OpenBSD[2].

[1]: https://github.com/openwrt/packages/issues/20107
[2]: https://github.com/openbsd/ports/blob/26a04435bf2a09dcbe22b718bfee08997617a906/lang/python/3.10/patches/patch-Modules__hashopenssl_c

Fixes: 4ecd9d67e906 ("python3: fix ssl support by removing libressl patches")
Signed-off-by: Jeffery To &lt;jeffery.to@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: fix ssl support by removing libressl patches</title>
<updated>2022-12-21T13:27:06Z</updated>
<author>
<name>Nick Hainke</name>
</author>
<published>2022-12-20T08:20:45Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=4ecd9d67e90651a8e93760bf0b5771f7057c74a8'/>
<id>urn:sha1:4ecd9d67e90651a8e93760bf0b5771f7057c74a8</id>
<content type='text'>
Remove libressl specific patches. With commit
("tools/libressl: update to 3.7.0") they are no longer needed,
rather they cause python3 to be compiled without working ssl-support.

Fixes: #20107
Suggested-by: Andre Heider &lt;a.heider@gmail.com&gt;
Signed-off-by: Nick Hainke &lt;vincent@systemli.org&gt;
</content>
</entry>
<entry>
<title>python3: update patches for libressl v3.5</title>
<updated>2022-07-23T19:28:55Z</updated>
<author>
<name>Andre Heider</name>
</author>
<published>2022-07-19T12:14:16Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=bd6e20542199b4805346059cc8e26f67fff8affd'/>
<id>urn:sha1:bd6e20542199b4805346059cc8e26f67fff8affd</id>
<content type='text'>
Based upon patches from OpenBSD[0] and Gentoo[1].

Switched to the LibreSSL provided LIBRESSL_VERSION_NUMBER macro, which
makes OPENWRT_HOST_BUILD redundant.

[0] https://github.com/openbsd/ports/tree/master/lang/python/3.10/patches
[1] https://github.com/gentoo/libressl/tree/master/dev-lang/python/files

Signed-off-by: Andre Heider &lt;a.heider@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: Update to 3.10.2, refresh patches</title>
<updated>2022-01-16T20:32:42Z</updated>
<author>
<name>Jeffery To</name>
</author>
<published>2022-01-16T20:29:10Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=5b2c8bccf3deff782a7a21b98cd96044747f574f'/>
<id>urn:sha1:5b2c8bccf3deff782a7a21b98cd96044747f574f</id>
<content type='text'>
Signed-off-by: Jeffery To &lt;jeffery.to@gmail.com&gt;
</content>
</entry>
<entry>
<title>python3: bump to version 3.10.0</title>
<updated>2021-11-19T11:30:14Z</updated>
<author>
<name>Alexandru Ardelean</name>
</author>
<published>2021-10-27T09:10:02Z</published>
<link rel='alternate' type='text/html' href='https://git-03.infra.openwrt.org/feed/packages/commit/?id=4e05541782edeb06b51d691dadf52648df24c940'/>
<id>urn:sha1:4e05541782edeb06b51d691dadf52648df24c940</id>
<content type='text'>
Manually re-applied:
  008-distutils-use-python-sysroot.patch
  016-adjust-config-paths.patch

Drop patch: 003-do-not-run-distutils-tests.patch
There is now a configure option '--disable-test-modules'
And seems we left the '_ctypes_test' around for quite some time.
Dropped now.
Refs:
  https://bugs.python.org/issue27640
  https://bugs.python.org/issue43282

Drop patch: 013-getbuildinfo-date-time-source-date-epoch.patch
Python build honors SOURCE_DATE_EPOCH pretty well now.

Drop setuptools patches. Setuptools should be reproducible with Python 3.6+
according to a mention here:
  https://github.com/pypa/setuptools/pull/1690#issuecomment-536517456
It's time to let upstream fix Setuptools reproduce-ability.

Drop patch: 010-do-not-add-rt-lib-dirs-when-cross-compiling.patch
I can't seem to fully remember why it's there.
And it seem to build fine without it.

Drop patch: 015-abort-on-failed-modules.patch
Python build supports a similar PYTHONSTRICTEXTENSIONBUILD=1 env-var
option.

Add patch: 026-openssl-feature-flags.patch
We need to keep this in our tree for a while.
See:
  https://bugs.python.org/issue45627

Backport patch: 027-bpo-43158-Use-configure-values-for-building-_uuid-ex.patch
Link: https://github.com/python/cpython/pull/29353
Fixes the build for uuid C module.

Add patch: 028-host-python-support-ssl-with-libressl.patch
We need the _ssl module working on the host-side with LibreSSL for pip to
work to download from https://pypi.org
Refs: https://github.com/openwrt/openwrt/pull/4749

Add patch: 029-disable-deprecation-warning.patch
Fixes apparmor build. The warning causes a configure error.

Refreshed the rest of patches.

Some old build-flags were removed. They don't seem to be necessary anymore.

Split python3-uuid from python3-light. To better manage the libuuid library
(if needed). Also, fixing the uuid C module build. Seems this was failing,
and was falling back to using hashlib.

Signed-off-by: Alexandru Ardelean &lt;ardeleanalex@gmail.com&gt;
</content>
</entry>
</feed>
