python3: update 3.11.0 -> 3.11.1

Drop 0001-bpo-36852-proper-detection-of-mips-architecture-for-.patch:
the patch has been rejected upstream (see the bug), and does quite a
bit more than just fix the mips softfloat problem. If the problem
still exists, then the fix needs to be re-done, and re-submitted.

The other two patches have been merged upstream.

License-Update: http->https

(From OE-Core rev: 9b6e8c173162798428cf8627b596ca81cd8ab855)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

1 files changed, 0 insertions, 95 deletions

diff --git a/meta/recipes-devtools/python/python3/cve-2022-37460.patch b/meta/recipes-devtools/python/python3/cve-2022-37460.patch
deleted file mode 100644
index 12177684fd..0000000000
--- a/meta/recipes-devtools/python/python3/cve-2022-37460.patch
+++ /dev/null
@@ -1,95 +0,0 @@
-From 94582bb643f98bc58b1ff206d1d2a56f97c3a7e5 Mon Sep 17 00:00:00 2001
-From: "Miss Islington (bot)"
- <31488909+miss-islington@users.noreply.github.com>
-Date: Wed, 28 Sep 2022 16:46:11 -0700
-Subject: [PATCH] gh-97612: Fix shell injection in get-remote-certificate.py
- (GH-97613)
-
-Fix a shell code injection vulnerability in the
-get-remote-certificate.py example script. The script no longer uses a
-shell to run "openssl" commands. Issue reported and initial fix by
-Caleb Shortt.
-
-Remove the Windows code path to send "quit" on stdin to the "openssl
-s_client" command: use DEVNULL on all platforms instead.
-
-Co-authored-by: Caleb Shortt <caleb@rgauge.com>
-(cherry picked from commit 83a0f44ffd8b398673ae56c310cf5768d359c341)
-
-Co-authored-by: Victor Stinner <vstinner@python.org>
----
-CVE: CVE-2022-37460
-
-Upstream-Status: Backport [https://github.com/python/cpython.git]
-                          [commit 94582bb643... unmodified]
-
-Signed-off-by: Joe Slater <joe.slater@windriver.com>
-
----
- ...2-09-28-12-10-57.gh-issue-97612.y6NvOQ.rst |  3 +++
- Tools/scripts/get-remote-certificate.py       | 25 ++++++-------------
- 2 files changed, 10 insertions(+), 18 deletions(-)
- create mode 100644 Misc/NEWS.d/next/Security/2022-09-28-12-10-57.gh-issue-97612.y6NvOQ.rst
-
-diff --git a/Misc/NEWS.d/next/Security/2022-09-28-12-10-57.gh-issue-97612.y6NvOQ.rst b/Misc/NEWS.d/next/Security/2022-09-28-12-10-57.gh-issue-97612.y6NvOQ.rst
-new file mode 100644
-index 0000000000..2f113492d4
---- /dev/null
-+++ b/Misc/NEWS.d/next/Security/2022-09-28-12-10-57.gh-issue-97612.y6NvOQ.rst
-@@ -0,0 +1,3 @@
-+Fix a shell code injection vulnerability in the ``get-remote-certificate.py``
-+example script. The script no longer uses a shell to run ``openssl`` commands.
-+Issue reported and initial fix by Caleb Shortt. Patch by Victor Stinner.
-diff --git a/Tools/scripts/get-remote-certificate.py b/Tools/scripts/get-remote-certificate.py
-index 38901286e1..68272fca83 100755
---- a/Tools/scripts/get-remote-certificate.py
-+++ b/Tools/scripts/get-remote-certificate.py
-@@ -15,8 +15,8 @@
- def fetch_server_certificate (host, port):
- 
-     def subproc(cmd):
--        from subprocess import Popen, PIPE, STDOUT
--        proc = Popen(cmd, stdout=PIPE, stderr=STDOUT, shell=True)
-+        from subprocess import Popen, PIPE, STDOUT, DEVNULL
-+        proc = Popen(cmd, stdout=PIPE, stderr=STDOUT, stdin=DEVNULL)
-         status = proc.wait()
-         output = proc.stdout.read()
-         return status, output
-@@ -33,8 +33,8 @@ def strip_to_x509_cert(certfile_contents, outfile=None):
-                 fp.write(m.group(1) + b"\n")
-             try:
-                 tn2 = (outfile or tempfile.mktemp())
--                status, output = subproc(r'openssl x509 -in "%s" -out "%s"' %
--                                         (tn, tn2))
-+                cmd = ['openssl', 'x509', '-in', tn, '-out', tn2]
-+                status, output = subproc(cmd)
-                 if status != 0:
-                     raise RuntimeError('OpenSSL x509 failed with status %s and '
-                                        'output: %r' % (status, output))
-@@ -45,20 +45,9 @@ def strip_to_x509_cert(certfile_contents, outfile=None):
-             finally:
-                 os.unlink(tn)
- 
--    if sys.platform.startswith("win"):
--        tfile = tempfile.mktemp()
--        with open(tfile, "w") as fp:
--            fp.write("quit\n")
--        try:
--            status, output = subproc(
--                'openssl s_client -connect "%s:%s" -showcerts < "%s"' %
--                (host, port, tfile))
--        finally:
--            os.unlink(tfile)
--    else:
--        status, output = subproc(
--            'openssl s_client -connect "%s:%s" -showcerts < /dev/null' %
--            (host, port))
-+    cmd = ['openssl', 's_client', '-connect', '%s:%s' % (host, port), '-showcerts']
-+    status, output = subproc(cmd)
-+
-     if status != 0:
-         raise RuntimeError('OpenSSL connect failed with status %s and '
-                            'output: %r' % (status, output))
--- 
-2.38.1
-