[Libreoffice-commits] core.git: Changes to 'private/timar/pythonupgrademsp'

[Andras Timar (via logerrit)]

New branch 'private/timar/pythonupgrademsp' available with the following commits:
commit 71ec50308467ef9371663d1be251ccb9c8e862b9
Author: Andras Timar <andras.timar at collabora.com>
Date:   Tue Mar 16 21:56:04 2021 +0100

    we have to keep the original python version number 3.7.7
    
    because MSP creation does not tolerate adding/removing files, or
    remaming directories
    
    Change-Id: Ib997d438add82652d570753a749170f207dc3a80

commit 055b815dbe3769e33fab6d69eb8ce80bc2321285
Author: Michael Stahl <michael.stahl at allotropia.de>
Date:   Wed Feb 17 13:56:52 2021 +0100

    python3: upgrade to release 3.7.10
    
    Fixes CVE-2021-3177 plus these less important ones:
    CVE-2021-23336 CVE-2020-27619 CVE-2020-14422 CVE-2020-26116
    CVE-2019-20907 CVE-2020-8492 CVE-2019-18348
    
    Change-Id: I8e83395bd3e871eb2ed030a03827b7d261c96049

commit 1bdba93ee984f004f2b26e15e2e6ee223028c91d
Author: Caolán McNamara <caolanm at redhat.com>
Date:   Mon Feb 8 17:05:28 2021 +0000

    default to CertificateValidity::INVALID
    
    so if CertGetCertificateChain fails we don't want validity to be
    css::security::CertificateValidity::VALID which is what the old default
    of 0 equates to
    
    notably
    
    commit 1e0bc66d16aee28ce8bd9582ea32178c63841902
    Date:   Thu Nov 5 16:55:26 2009 +0100
    
        jl137:  #103420# better logging
    
    turned the nss equivalent of SecurityEnvironment_NssImpl::verifyCertificate
    from 0 to CertificateValidity::INVALID like this change does
    
    Change-Id: I5350dbc22d1b9b378da2976d3b0abd728f1f4c27
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/110561
    Tested-by: Jenkins
    Reviewed-by: Miklos Vajna <vmiklos at collabora.com>