Skip to content

Commit 1b74aad

Browse files
dumoldumol
authored
Ubuntu 22.04 support. (#165)
* No need for PyPI's trusted_host arg. * Removed deps checks for distros no longer specifically supported. * Backported pkg mgmt changes from pythia. * Streamlined OpenSSL manual installation. * Removed some buildbot stuff. * Improved error checking. * Fixed deps checking script. * Updated documented external deps. * Try building on Ubuntu 22.04 under Docker. * Fixed deps check on RHEL. * Cater for NMAKE on Windows. * Also install ncurses headers on Ubuntu 22.04. * Use generic Linux package on Ubuntu 22.04. * Stop trying to build on Ubuntu 22.04 for now. * Changes after review. * Show full zlib version when testing for it.
1 parent 93dc340 commit 1b74aad

9 files changed

Lines changed: 399 additions & 514 deletions

File tree

‎.github/workflows/docker.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
if: startsWith(matrix.container, 'alpine')
4242
run: |
4343
apk upgrade -U
44-
apk add git curl bash gcc make m4 automake libtool patch zlib-dev libffi-dev ncurses-dev linux-headers musl-dev openssl-dev lddtree shadow sudo openssh-client paxctl
44+
apk add git curl bash gcc make m4 automake libtool patch libffi-dev zlib-dev openssl-dev musl-dev lddtree shadow sudo openssh-client paxctl
4545
4646
# Stick to CentOS 8.2 as OpenSSL got updated in 8.3 from 1.1.1c to 1.1.1g.
4747
- name: CentOS 8.2 setup

‎brink.sh‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -315,8 +315,6 @@ pip_install() {
315315
rm -rf ${BUILD_FOLDER}/pip-build
316316
${PYTHON_BIN} -m \
317317
pip install \
318-
--trusted-host bin.chevah.com \
319-
--trusted-host pypi-internal.chevah.com \
320318
--index-url=$PIP_INDEX_URL \
321319
--build=${BUILD_FOLDER}/pip-build \
322320
$1
@@ -731,6 +729,9 @@ detect_os() {
731729
if [ ${os_version_chevah%%04} == ${os_version_chevah} \
732730
-o $(( ${os_version_chevah:0:2} % 2 )) -ne 0 ]; then
733731
check_linux_glibc
732+
elif [ ${os_version_chevah} == "2204" ]; then
733+
# OpenSSL 3.0.x not supported by cryptography 3.3.x.
734+
check_linux_glibc
734735
fi
735736
set_os_if_not_generic "ubuntu" $os_version_chevah
736737
;;

‎chevah_build‎

Lines changed: 12 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -97,7 +97,6 @@ PYPI_SITE="https://bin.chevah.com:20443/pypi"
9797
# Arguments that are sent when using pip.
9898
PIP_ARGS="\
9999
--index-url=${PYPI_SITE}/simple \
100-
--trusted-host=bin.chevah.com \
101100
--no-cache-dir \
102101
--no-warn-script-location \
103102
"
@@ -123,9 +122,9 @@ BUILD_FOLDER='build'
123122
# On platforms with a choice of C compilers, you may choose among the
124123
# available compilers by setting CC and CXX further down in this script.
125124
COMMON_PKGS="gcc make m4 automake libtool patch"
126-
DEB_PKGS="$COMMON_PKGS git libssl-dev zlib1g-dev libffi-dev libncurses5-dev"
127-
RHEL_PKGS="$COMMON_PKGS git openssl-devel zlib-devel libffi-devel ncurses-devel"
128-
ALP_PKGS="$COMMON_PKGS git zlib-dev linux-headers musl-dev openssl-dev lddtree"
125+
DEB_PKGS="$COMMON_PKGS git libffi-dev zlib1g-dev libncurses5-dev libssl-dev"
126+
RPM_PKGS="$COMMON_PKGS git libffi-devel zlib-devel ncurses-devel openssl-devel"
127+
APK_PKGS="$COMMON_PKGS git zlib-dev musl-dev openssl-dev linux-headers lddtree"
129128
# No automated Windows package management, but here's what it's needed.
130129
CHOCO_PKGS="vcpython27 make git StrawberryPerl nasm 7zip"
131130

@@ -343,6 +342,7 @@ case "$ARCH" in
343342
let JOBS=CPUS
344343
;;
345344
esac
345+
# Only add to $MAKE if there is one, so that NMAKE on Windows is not confused.
346346
if [ -n "${MAKE-}" ]; then
347347
export MAKE="$MAKE -j${JOBS}"
348348
fi
@@ -364,12 +364,12 @@ check_dependencies() {
364364
check_command="dpkg --status"
365365
;;
366366
rhel*|amzn*)
367-
packages=$RHEL_PKGS
367+
packages=$RPM_PKGS
368368
check_command="rpm --query"
369369
;;
370370
alpine*)
371371
# Alpine 3.9 switched back to OpenSSL as default.
372-
packages=$ALP_PKGS
372+
packages=$APK_PKGS
373373
check_command="apk info -q -e"
374374
;;
375375
# On remaining OS'es we just check for some of the needed commands.
@@ -384,7 +384,7 @@ check_dependencies() {
384384
packages="git gmake patch xlc_r seq sudo"
385385
;;
386386
macos)
387-
packages="$CC make m4 libtool git patch"
387+
packages="$CC make m4 libtool git patch perl"
388388
;;
389389
win)
390390
# To not get confused by MSYS2's perl, we check for wperl.
@@ -419,8 +419,9 @@ check_dependencies() {
419419
command -v makeinfo
420420
if [ $? -ne 0 ]; then
421421
(>&2 echo "Missing makeinfo, trying to link it to /bin/true in ~/bin.")
422-
mkdir -p ~/bin
423-
ln -s /bin/true ~/bin/makeinfo
422+
execute mkdir -p ~/bin
423+
execute rm -f ~/bin/makeinfo
424+
execute ln -s /bin/true ~/bin/makeinfo
424425
export PATH=$PATH:~/bin/
425426
fi
426427
}
@@ -430,7 +431,7 @@ help_text_clean="Clean the build."
430431
command_clean() {
431432
if [ -e ${BUILD_FOLDER} ]; then
432433
echo 'Previous build sub-directory found. Removing...'
433-
rm -rf ${BUILD_FOLDER}
434+
execute rm -rf ${BUILD_FOLDER}
434435
fi
435436
}
436437

@@ -491,11 +492,6 @@ command_build() {
491492
fi
492493
# On Windows, the BATs from pyca/infra do the install part.
493494
if [ "${OS%win*}" != "" ]; then
494-
# Place SSL headers where they can be picked up.
495-
echo "Copying OpenSSL $OPENSSL_VERSION headers..."
496-
execute cp -r \
497-
build/openssl-${OPENSSL_VERSION}/include/openssl \
498-
${INSTALL_FOLDER}/include/
499495
# To make sure they're found, we're back to using CPPFLAGS.
500496
export CPPFLAGS="${CPPFLAGS:-} -I${INSTALL_FOLDER}/include"
501497
fi
@@ -736,13 +732,11 @@ command_test() {
736732
(>&2 echo -e "\tSkipping because of upstream issues.")
737733
;;
738734
lnx*)
739-
set +o nounset
740-
if [ x"$CHEVAH_CONTAINER" = x"yes" ]; then
735+
if [ x${CHEVAH_CONTAINER-} = x"yes" ]; then
741736
(>&2 echo -e "\tSkipping as it fails under Docker on CentOS 5.")
742737
else
743738
execute $PYTHON_BIN ${SCANDIR_FOLDER}/test/run_tests.py
744739
fi
745-
set -o nounset
746740
;;
747741
*)
748742
# UTF-8 locale is needed for the tests to pass on remaining OS'es.

‎external_deps.csv‎

Lines changed: 24 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,36 +1,37 @@
11
OS,AIX,,,Amazon,Alpine,,Debian,FreeBSD,,HP-UX,macOS,OS X,RHEL,,,,SLES,,Solaris,,,,Ubuntu,,,,Windows,
2-
OS Version,5.3³,6.1³,7.1¹,2¹,3.12³,3.14¹,5.0+²,11.4³,12.2+³,11.31³,10.13+¹,10.8³,5.11¹,6.x¹,7.x¹,8.x¹,11SP4²,12SP3²,10u8+³,11.0/11.1³,11.2³,11.4³,14.04¹,16.04¹,18.04¹,20.04¹,"XP, 2003, 2008³","2012r2, 2016, 2019¹"
2+
OS Version,5.3³,6.1³,7.1¹,2¹,3.12³,3.14¹,5.0+²,11.4³,12.2+³,11.31³,10.13+¹,10.8³,5.11¹,6.x¹,7.x¹,8.x¹,11SP4²,12SP3²,10u8+³,11.0/11.1³,11.2³,11.4³,14.04¹,16.04¹,18.04¹,20.04¹,"XP, 2003, 2008³","2012r2, 2016, 2019, 2022¹"
33
OpenSSL⁶,"1.0.2v-chevah2 (statically linked with stdlib “ssl”)
4-
1.0.2v-chevah2 (statically linked with cryptography)",1.0.2k (from AIX Web Download Pack Programs),"1.0.2v-chevah3 (statically linked with stdlib “ssl”)
5-
1.0.2v-chevah3 (statically linked with cryptography)","1.1.1m (statically linked with stdlib “ssl”)
6-
1.1.1m (statically linked with cryptography)",1.1.1j,1.1.1m,"1.1.1m (statically linked with stdlib “ssl”)
7-
1.1.1m (statically linked with cryptography)",1.0.1u,1.0.2s,1.0.2h,"1.1.1m (statically linked with stdlib “ssl”)
8-
1.1.1m (statically linked with cryptography)","1.1.1g (statically built for stdlib “ssl”)
9-
1.1.1g (bundled with upstream cryptography 2.9.1)","1.1.1m (statically linked with stdlib “ssl”)
10-
1.1.1m (statically linked with cryptography)","1.1.1m (statically linked with stdlib “ssl”)
11-
1.1.1m (statically linked with cryptography)","1.1.1m (statically linked with stdlib “ssl”)
12-
1.1.1m (statically linked with cryptography)",1.1.1c FIPS,"1.1.1m (statically linked with stdlib “ssl”)
13-
1.1.1m (statically linked with cryptography)","1.1.1m (statically linked with stdlib “ssl”)
14-
1.1.1m (statically linked with cryptography)",1.0.2n (from upstream Oracle patches),1.0.0x,1.0.1h,"
15-
1.0.2o","1.1.1m (statically linked with stdlib “ssl”)
16-
1.1.1m (statically linked with cryptography)","1.1.1m (statically linked with stdlib “ssl”)
17-
1.1.1m (statically linked with cryptography)",1.1.0g,1.1.1f,"1.0.2t (bundled with upstream Python 2.7.18)
4+
1.0.2v-chevah2 (statically linked with cryptography)",1.0.2k (from AIX Web Download Pack Programs),"1.0.2v-chevah4 (statically linked with stdlib “ssl”)
5+
1.0.2v-chevah4 (statically linked with cryptography)","1.1.1n (statically linked with stdlib “ssl”)
6+
1.1.1n (statically linked with cryptography)",1.1.1j,1.1.1m,"1.1.1n (statically linked with stdlib “ssl”)
7+
1.1.1n (statically linked with cryptography)",1.0.1u,1.0.2s,1.0.2h,"1.1.1n (statically linked with stdlib “ssl”)
8+
1.1.1n (statically linked with cryptography)","1.1.1g (statically built for stdlib “ssl”)
9+
1.1.1g (bundled with upstream cryptography 2.9.1)","1.1.1n (statically linked with stdlib “ssl”)
10+
1.1.1n (statically linked with cryptography)","1.1.1n (statically linked with stdlib “ssl”)
11+
1.1.1n (statically linked with cryptography)","1.1.1n (statically linked with stdlib “ssl”)
12+
1.1.1n (statically linked with cryptography)","1.1.1cFIPS /
13+
1.1.1k FIPS","1.1.1n (statically linked with stdlib “ssl”)
14+
1.1.1n (statically linked with cryptography)","1.1.1n (statically linked with stdlib “ssl”)
15+
1.1.1n (statically linked with cryptography)",1.0.2n (from upstream Oracle patches),1.0.0x,1.0.1h,"
16+
1.0.2o","1.1.1n (statically linked with stdlib “ssl”)
17+
1.1.1n (statically linked with cryptography)","1.1.1n (statically linked with stdlib “ssl”)
18+
1.1.1n (statically linked with cryptography)",1.1.0g,1.1.1f,"1.0.2t (bundled with upstream Python 2.7.18)
1819
1.1.1g (bundled with upstream cryptography 2.9.1)","1.0.2t⁹ (bundled with upstream Python 2.7.18)
19-
1.1.1m (built from upstream sources for cryptography)"
20+
1.1.1n (built from upstream sources for cryptography)"
2021
Python,2.7.18+patches,2.7.18¹¹,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18¹¹,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18¹¹,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.8⁴,2.7.18¹¹,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18+patches,2.7.18¹¹,2.7.18¹³
2122
SQLite,3.34.1,3.34.1,3.37.2,3.37.2,3.34.1,3.37.2,3.37.2,3.30.1,3.34.1,3.34.1,3.37.2,3.30.1,3.37.2,3.37.2,3.37.2,3.37.2,3.37.2,3.37.2,3.34.1,3.30.1,3.34.1,3.34.1,3.37.2,3.37.2,3.37.2,3.37.2,3.30.1 (we overwrite version from upstream Python at build time),3.37.2 (we overwrite version from upstream Python at build time)
2223
Expat,2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.1.0⁵ (bundled with Python 2.7.8),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python),2.2.8 (bundled with Python)
23-
zlib,1.2.11,p/o,1.2.11,1.2.11,p/o,p/o,1.2.11,p/o,p/o,1.2.11,p/o,p/o,1.2.11,1.2.11,p/o,p/o,1.2.11,p/o,p/o,p/o,p/o,p/o,1.2.11,1.2.11,p/o,p/o,1.2.11 (bundled with Python),1.2.11 (bundled with Python)
24+
zlib,1.2.12,p/o,1.2.12,1.2.12,p/o,p/o,1.2.12,p/o,p/o,1.2.12,p/o,p/o,1.2.12,1.2.12,p/o,p/o,1.2.12,p/o,p/o,p/o,p/o,p/o,1.2.12,1.2.12,p/o,p/o,1.2.11⁸ (bundled with Python),1.2.11⁸ (bundled with Python)
2425
bzip2,1.0.8,1.0.8,1.0.8,1.0.8,1.0.8,1.0.8,1.0.8,p/o,p/o,1.0.8,p/o,p/o,1.0.8,1.0.8,1.0.8,1.0.8,1.0.8,1.0.8,p/o,p/o,p/o,p/o,1.0.8,1.0.8,1.0.8,1.0.8,1.0.6 (bundled with Python),1.0.6 (bundled with Python)
25-
libffi,3.2.1,3.2.1,3.2.1,p/o,p/o,3.2.1,3.2.1,3.2.1,3.2.1,3.2.1,p/o,p/o,3.2.1,3.2.1,p/o,p/o,3.2.1,3.2.1,n/a,n/a,3.2.1,3.2.1,p/o,p/o,p/o,p/o,n/a,n/a
26+
libffi,3.4.2,3.4.2,3.4.2,p/o,p/o,3.4.2,3.4.2,3.4.2,3.4.2,3.4.2,p/o,p/o,3.4.2,3.4.2,p/o,p/o,3.4.2,3.4.2,n/a,n/a,3.4.2,3.4.2,p/o,p/o,p/o,p/o,n/a,n/a
2627
libedit,n/a,n/a,n/a,n/a,20170329-3.1,20170329-3.1,n/a,20170329-3.1,20170329-3.1,n/a,20170329-3.1,20170329-3.1,n/a,n/a,n/a,20170329-3.1,n/a,20170329-3.1,n/a,20170329-3.1,20170329-3.1,20170329-3.1,n/a,n/a,20170329-3.1,20170329-3.1,n/a,n/a
2728
pysqlite,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,2.8.3,"n/a, upstream sqlite3 is used","n/a, upstream sqlite3 is used"
28-
pip,20.3.4,9.0.3,20.3.4,20.3.4,9.0.3,20.3.4,20.3.4,9.0.3,20.3.4,20.3.4,20.3.4,9.0.3,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4,9.0.3,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4,20.3.4
29+
pip,20.3.4¹⁴,9.0.3¹⁴,20.3.4chevah1,20.3.4chevah1,9.0.3¹⁴,20.3.4chevah1,20.3.4chevah1,9.0.3¹⁴,20.3.4chevah1,20.3.4¹⁴,20.3.4chevah1,9.0.3¹⁴,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4¹⁴,9.0.3¹⁴,20.3.4¹⁴,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4chevah1,20.3.4¹⁴,20.3.4chevah1
2930
setuptools,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,41.6.0,41.6.0,41.6.0,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1,44.1.1
3031
wheel,0.36.2,0.33.6,0.37.0,0.37.0,0.33.6,0.37.0,0.37.0,0.33.6,0.37.0,0.36.2,0.37.0,0.33.6,0.37.0,0.37.0,0.37.0,0.37.0,0.37.0,0.37.0,0.36.2,0.33.6,0.36.2,0.37.0,0.37.0,0.37.0,0.37.0,0.37.0,0.36.2,0.37.0
3132
pycparser,2.20,2.20,2.21,2.21,2.21,2.21,2.21,2.20,2.21,2.20,2.21,2.20,2.21,2.21,2.21,2.21,2.21,2.21,2.20,2.20,2.20,2.21,2.21,2.21,2.21,2.21,2.20,2.21
3233
setproctitle,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10,1.1.10
33-
cryptography,3.2.1¹²,2.9.2¹²,3.2.1¹²,3.3.2,3.3.2,3.3.2,3.3.2,2.9.2¹²,3.3.2,n/a,3.3.2,2.9.2¹² (wheel includes OpenSSL),3.3.2,3.3.2,3.3.2,3.3.2,3.3.2,3.3.2,n/a,n/a,n/a,3.2.1¹²,3.3.2,3.3.2,3.3.2,3.3.2,2.9.2¹² (wheel includes OpenSSL),3.3.2 (wheel includes OpenSSL)
34+
cryptography,3.2.1¹²,2.9.2¹²,3.2.1¹²,3.3.2,3.3.2,3.3.2,3.3.2,2.9.2¹²,3.3.2,n/a,3.3.2,2.9.2¹² (wheel includes OpenSSL),3.3.2,3.3.2,3.3.2,3.3.2,3.3.2,3.3.2,n/a,n/a,n/a,3.2.1¹²,3.3.2,3.3.2,3.3.2,3.3.2,2.9.2¹² (wheel includes OpenSSL),3.3.2
3435
six,1.15.0,1.13.0,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,1.11.0,1.15.0,1.15.0,1.15.0,1.11.0,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,1.11.0,1.15.0,1.15.0,1.11.0,1.11.0,1.11.0,1.11.0,1.11.0,1.11.0
3536
ipaddress,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,n/a,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,n/a,n/a,n/a,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23,1.0.23
3637
cffi,1.14.5,1.14.0,1.15.0,1.15.0,1.14.0,1.15.0,1.15.0,1.14.0,1.15.0,n/a,1.15.0,1.14.0,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,n/a,1.14.0,1.14.5,1.15.0,1.15.0,1.15.0,1.15.0,1.15.0,1.14.0,1.15.0
@@ -44,17 +45,18 @@ subprocess32,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3.5.4,3
4445
bcrypt,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,n/a,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7,3.1.7
4546
pywin32,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,n/a,,n/a,227,228
4647
,,,,,,,,,,,,,,,,,,,,,,,,,,,,
47-
Abbreviations:,n/a: not applicable,,,,,,,,,,,Notes:,"0. Dependencies above are listed as per the current build process, not for the latest released versions.",,,,,,,,,,,,,,,
48+
Abbreviations:,n/a: not applicable,,,,,,,,,,,Notes:,"0. Dependencies above are listed as per the current build process, not necessarily for the latest released versions of python-package.",,,,,,,,,,,,,,,
4849
,p/o: provided with OS,,,,,,,,,,,,"1. Tier 1 platforms, fully supported and tested",,,,,,,,,,,,,,,
4950
Colour codes:,DARKGREY: Tier 2 platforms and their problematic dependencies,,,,,,,,,,,,"2. Tier 2 platforms, partially supported, still built",,,,,,,,,,,,,,,
5051
,LIGHT GREY: Tier 3 platforms and their problematic dependencies,,,,,,,,,,,,"3. Tier 3 platforms, supported at some point, not built any more",,,,,,,,,,,,,,,
5152
,GREEN: no known vulnerabilities for Tier 1 platforms,,,,,,,,,,,,4. https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/version_id-92056/Python-Python-2.7.html,,,,,,,,,,,,,,,
5253
,"BLUE: possible vulnerabilities found upstream, but no released version has them yet",,,,,,,,,,,,5. https://github.com/libexpat/libexpat/blob/master/expat/Changes,,,,,,,,,,,,,,,
5354
,ORANGE: minor vulnerabilities found,,,,,,,,,,,,"6. Unless specified otherwise, OpenSSL libs are linked against dynamically",,,,,,,,,,,,,,,
5455
,RED: major vulnerabilities found,,,,,,,,,,,,"7. pyOpenSSL 0.14 and newer is a major rewrite, so it's not clear to what extent their vulnerabilities do apply",,,,,,,,,,,,,,,
55-
,MAGENTA: vulnerability status could not be established,,,,,,,,,,,,8. n/a,,,,,,,,,,,,,,,
56+
,MAGENTA: vulnerability status could not be established,,,,,,,,,,,,8. https://cve.report/CVE-2018-25032,,,,,,,,,,,,,,,
5657
,DEFAULT COLOUR: maintained upstream or not applicable,,,,,,,,,,,,9. https://www.openssl.org/news/openssl-1.0.2-notes.html,,,,,,,,,,,,,,,
5758
,,,,,,,,,,,,,10. https://www.openssl.org/news/openssl-1.1.1-notes.html,,,,,,,,,,,,,,,
5859
,,,,,,,,,,,,,11. https://github.com/ActiveState/cpython/tags,,,,,,,,,,,,,,,
5960
,,,,,,,,,,,,,12. https://cryptography.io/en/latest/changelog.html,,,,,,,,,,,,,,,
6061
,,,,,,,,,,,,,"13. On Windows, the upstream Python 2.7.18 packages are hot patched with all the ActivePython fixes except CVE-2021-3177",,,,,,,,,,,,,,,
62+
,,,,,,,,,,,,,14. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3572,,,,,,,,,,,,,,,

0 commit comments

Comments
 (0)