| Message ID | 20240212095514.11656-1-buildroot@bubu1.eu |
|---|---|
| State | Not Applicable |
| Headers | show |
| Series | package/python3: security bump to 3.12.2 | expand |
>>>>> "Marcus" == Marcus Hoffmann via buildroot <buildroot@buildroot.org> writes: > Fixes the following security issue: > * Skip .pth files with names starting with a dot or hidden file > attribute. [1] > [1] https://docs.python.org/release/3.12.2/whatsnew/changelog.html#security I have in the man time reverted the 3.12.x bump for now because of issues, so I have instead applied a bump to 3.11.8, which contains the same security fix.
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes: >>>>> "Marcus" == Marcus Hoffmann via buildroot <buildroot@buildroot.org> writes: >> Fixes the following security issue: >> * Skip .pth files with names starting with a dot or hidden file >> attribute. [1] >> [1] https://docs.python.org/release/3.12.2/whatsnew/changelog.html#security > I have in the man time reverted the 3.12.x bump for now because of s/man/mean/ naturally.
diff --git a/package/python3/python3.hash b/package/python3/python3.hash index 725c854050..611b8d0432 100644 --- a/package/python3/python3.hash +++ b/package/python3/python3.hash @@ -1,5 +1,5 @@ -# From https://www.python.org/downloads/release/python-3121/ -md5 50f827c800483776c8ef86e6a53831fa Python-3.12.1.tar.xz +# From https://www.python.org/downloads/release/python-3122/ +md5 e7c178b97bf8f7ccd677b94d614f7b3c Python-3.12.2.tar.xz # Locally computed -sha256 8dfb8f426fcd226657f9e2bd5f1e96e53264965176fa17d32658e873591aeb21 Python-3.12.1.tar.xz +sha256 be28112dac813d2053545c14bf13a16401a21877f1a69eb6ea5d84c4a0f3d870 Python-3.12.2.tar.xz sha256 3b2f81fe21d181c499c59a256c8e1968455d6689d269aa85373bfb6af41da3bf LICENSE diff --git a/package/python3/python3.mk b/package/python3/python3.mk index 42765abcf4..e500155c80 100644 --- a/package/python3/python3.mk +++ b/package/python3/python3.mk @@ -5,7 +5,7 @@ ################################################################################ PYTHON3_VERSION_MAJOR = 3.12 -PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).1 +PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).2 PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION) PYTHON3_LICENSE = Python-2.0, others
Fixes the following security issue: * Skip .pth files with names starting with a dot or hidden file attribute. [1] [1] https://docs.python.org/release/3.12.2/whatsnew/changelog.html#security --- package/python3/python3.hash | 6 +++--- package/python3/python3.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-)