buildroot/package/python-web2py, branch 2017.02.2

python-web2py: security bump to version 2.14.6

2017-04-28T12:25:38+00:00

CVE-2016-4806 - Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files. CVE-2016-4807 - Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin). CVE-2016-4808 - Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just by sending a URL to victim. CVE-2016-10321 - web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks. Signed-off-by: Peter Korsgaard (cherry picked from commit a534030c6e67ff0319f8af2b55fe977a06f17dfd) Signed-off-by: Peter Korsgaard

python/web2py: bump to version 2.12.3 - hash file

2015-11-24T18:43:50+00:00

This patch bumps web2py to the latest released version (2.12.3) and adds hash file. Signed-off-by: Angelo Compagnucci Signed-off-by: Thomas Petazzoni

python-web2py: bump to version 2.11.3

2015-11-22T13:10:20+00:00

This patch bumps web2py version to 2.11.3 Signed-off-by: Angelo Compagnucci Signed-off-by: Thomas Petazzoni

package/python-web2py: fix permissions

2015-11-04T20:48:42+00:00

The PYTHON_WEB2PY_PERMISSIONS table was using the user and group names instead of the uid and gid, causing makedevs to retrieve the uid and gid from the host system. Signed-off-by: Noé Rubinstein Signed-off-by: Thomas Petazzoni

package: Replace 'echo -n' by 'printf'

2015-10-03T22:56:41+00:00

'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard

package/python-web2py: bump to version R-2.11.2

2015-07-26T16:34:03+00:00

This patch bumps python-web2py to version R-2.11.2. Signed-off-by: Angelo Compagnucci Signed-off-by: Thomas Petazzoni

package/python-web2py: new package

2015-07-23T20:21:52+00:00

This patch adds web2py package. web2py is a free open source full-stack framework for rapid development of fast, scalable, secure and portable database-driven web-based applications. [Thomas: fixup symbolic link to the systemd service file.] Signed-off-by: Angelo Compagnucci Signed-off-by: Thomas Petazzoni