From: Bernd Kuhls <bernd@kuhls.net>
To: buildroot@buildroot.org
Cc: "Joseph Kogut" <joseph.kogut@gmail.com>,
"Christophe Vu-Brugier" <cvubrugier@fastmail.fm>,
"Raphaël Mélotte" <raphael.melotte@mind.be>,
"Flávio Tapajós" <flavio.tapajos@newtesc.com.br>,
"Martin Hundebøll" <martin@geanix.com>,
"Grzegorz Blach" <grzegorz@blach.pl>,
"Marcin Niestroj" <m.niestroj@grinn-global.com>,
"Guillaume William Brs" <guillaume.bressaix@gmail.com>,
"James Hilliard" <james.hilliard1@gmail.com>,
"Ludovic Desroches" <ludovic.desroches@microchip.com>,
"Jagan Teki" <jagan@amarulasolutions.com>,
"Thomas Petazzoni" <thomas.petazzoni@bootlin.com>,
"Falco Hyfing" <hyfinglists@gmail.com>,
"Mauro Condarelli" <mc5686@mclink.it>,
"Fiona Klute" <fiona.klute@gmx.de>
Subject: [Buildroot] [PATCH 09/75] package/python-cbor2: security bump version to 5.9.0
Date: Fri, 1 May 2026 14:29:54 +0200 [thread overview]
Message-ID: <20260501123100.1918951-9-bernd@kuhls.net> (raw)
In-Reply-To: <20260501123100.1918951-1-bernd@kuhls.net>
https://github.com/agronholm/cbor2/blob/5.9.0/docs/versionhistory.rst
Fixes CVE-2026-26209.
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
package/python-cbor2/python-cbor2.hash | 4 ++--
package/python-cbor2/python-cbor2.mk | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/python-cbor2/python-cbor2.hash b/package/python-cbor2/python-cbor2.hash
index 2c72626637..b4d3025889 100644
--- a/package/python-cbor2/python-cbor2.hash
+++ b/package/python-cbor2/python-cbor2.hash
@@ -1,5 +1,5 @@
# md5, sha256 from https://pypi.org/pypi/cbor2/json
-md5 43d53d2eedc711252f5f66b1e05389a5 cbor2-5.8.0.tar.gz
-sha256 b19c35fcae9688ac01ef75bad5db27300c2537eb4ee00ed07e05d8456a0d4931 cbor2-5.8.0.tar.gz
+md5 21a7e1096c25ef19a81730e2c0ce05a6 cbor2-5.9.0.tar.gz
+sha256 85c7a46279ac8f226e1059275221e6b3d0e370d2bb6bd0500f9780781615bcea cbor2-5.9.0.tar.gz
# Locally computed sha256 checksums
sha256 a6afd126d8f545a15166a22f25fadff4b9fb4978bbdd17e97d97d950b66d2fef LICENSE.txt
diff --git a/package/python-cbor2/python-cbor2.mk b/package/python-cbor2/python-cbor2.mk
index 6f8bc31996..859ee4a1b5 100644
--- a/package/python-cbor2/python-cbor2.mk
+++ b/package/python-cbor2/python-cbor2.mk
@@ -4,9 +4,9 @@
#
################################################################################
-PYTHON_CBOR2_VERSION = 5.8.0
+PYTHON_CBOR2_VERSION = 5.9.0
PYTHON_CBOR2_SOURCE = cbor2-$(PYTHON_CBOR2_VERSION).tar.gz
-PYTHON_CBOR2_SITE = https://files.pythonhosted.org/packages/d9/8e/8b4fdde28e42ffcd741a37f4ffa9fb59cd4fe01625b544dfcfd9ccb54f01
+PYTHON_CBOR2_SITE = https://files.pythonhosted.org/packages/bd/cb/09939728be094d155b5d4ac262e39877875f5f7e36eea66beb359f647bd0
PYTHON_CBOR2_SETUP_TYPE = setuptools
PYTHON_CBOR2_LICENSE = MIT
PYTHON_CBOR2_LICENSE_FILES = LICENSE.txt
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2026-05-01 12:32 UTC|newest]
Thread overview: 84+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-01 12:29 [Buildroot] [PATCH 01/75] package/python-aiohttp: bump version to 3.13.5 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 02/75] package/python-anyio: bump to 4.13.0 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 03/75] package/python-async-lru: bump version to 2.3.0 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 04/75] package/python-attrs: bump version to 26.1.0 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 05/75] package/python-bitarray: bump version to 3.8.1 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 06/75] package/python-bleak: bump version to 3.0.1 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 07/75] package/python-boto3: bump version to 1.43.1 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 08/75] package/python-botocore: " Bernd Kuhls
2026-05-01 12:29 ` Bernd Kuhls [this message]
2026-05-15 13:33 ` [Buildroot] [PATCH 09/75] package/python-cbor2: security bump version to 5.9.0 Thomas Perale via buildroot
2026-05-01 12:29 ` [Buildroot] [PATCH 10/75] package/python-certifi: bump version to 2026.4.22 Bernd Kuhls
2026-05-15 13:34 ` Thomas Perale via buildroot
2026-05-01 12:29 ` [Buildroot] [PATCH 11/75] package/python-click: bump version to 8.3.3 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 12/75] package/python-cryptography: bump to version 47.0.0 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 13/75] package/python-dbus-fast: bump version to 4.0.4 Bernd Kuhls
2026-05-01 12:29 ` [Buildroot] [PATCH 14/75] package/python-dtschema: bump version to 2026.4 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 15/75] package/python-editables: bump version to 0.6 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 16/75] package/python-fastapi: bump to version 0.136.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 17/75] package/python-filelock: bump version to 3.29.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 18/75] package/python-flask-smorest: bump version to 0.47.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 19/75] package/python-flask-wtf: bump version to 1.3.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 20/75] package/python-google-api-core: bump version to 2.30.3 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 21/75] package/python-googleapis-common-protos: bump version to 1.74.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 22/75] package/python-greenlet: bump version to 3.5.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 23/75] package/python-hiredis: bump version to 3.3.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 24/75] package/python-installer: bump version to 1.0.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 25/75] package/python-librt: bump version to 0.9.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 26/75] package/python-lmdb: security bump version to 2.2.0 Bernd Kuhls
2026-05-15 13:33 ` Thomas Perale via buildroot
2026-05-01 12:30 ` [Buildroot] [PATCH 27/75] package/python-mako: bump version to 1.3.12 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 28/75] package/python-marshmallow-sqlalchemy: bump version to 1.5.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 29/75] package/python-marshmallow: bump version to 4.3.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 30/75] package/python-matplotlib: security bump version to 3.10.9 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 31/75] package/python-more-itertools: bump version to 11.0.2 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 32/75] package/python-mypy: bump to version 1.20.2 Bernd Kuhls
2026-05-03 14:53 ` Julien Olivain via buildroot
2026-05-01 12:30 ` [Buildroot] [PATCH 33/75] package/python-packaging: bump version to 26.2 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 34/75] package/python-patch-ng: bump version to 1.19.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 35/75] package/python-pathspec: bump version to 1.1.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 36/75] package/python-pdm-backend: bump version to 2.4.8 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 37/75] package/python-pip: bump version to 26.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 38/75] package/python-platformdirs: bump version to 4.9.6 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 39/75] package/python-poetry-core: bump version to 2.3.2 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 40/75] package/python-proto-plus: bump version to 1.27.2 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 41/75] package/python-pyasn1: security bump version to 0.6.3 Bernd Kuhls
2026-05-15 13:34 ` Thomas Perale via buildroot
2026-05-01 12:30 ` [Buildroot] [PATCH 42/75] package/python-pygments: bump version to 2.20.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 43/75] package/python-pyicu: bump version to 2.16.2 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 44/75] package/python-pymodbus: bump version to 3.13.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 45/75] package/python-pyopenssl: security bump version to 26.1.0 Bernd Kuhls
2026-05-15 13:33 ` Thomas Perale via buildroot
2026-05-01 12:30 ` [Buildroot] [PATCH 46/75] package/python-pyroute2: bump version to 0.9.6 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 47/75] package/python-pytest: security bump version to 9.0.3 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 48/75] package/python-redis: bump version to 7.4.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 49/75] package/python-regex: bump version to 2026.4.4 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 50/75] package/python-requests: security bump version to 2.33.1 Bernd Kuhls
2026-05-15 13:34 ` Thomas Perale via buildroot
2026-05-01 12:30 ` [Buildroot] [PATCH 51/75] package/python-rich: bump to version 15.0.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 52/75] package/python-s3transfer: bump version to 0.17.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 53/75] package/python-scipy: bump version to 1.17.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 54/75] package/python-sentry-sdk: bump version to 2.58.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 55/75] package/python-setuptools-rust: bump version to 1.12.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 56/75] package/python-simplejson: bump version to 4.1.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 57/75] package/python-smbprotocol: bump version to 1.16.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 58/75] package/python-smbus2: bump to version 0.6.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 59/75] package/python-sqlalchemy: bump version to 2.0.49 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 60/75] package/python-starlette: bump version to 1.0.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 61/75] package/python-telnetlib3: bump version to 4.0.2 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 62/75] package/python-textual: bump version to 8.2.5 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 63/75] package/python-tomli: bump version to 2.4.1 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 64/75] package/python-tortoise-orm: bump version to 1.1.7 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 65/75] package/python-trove-classifiers: bump version to 2026.4.28.13 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 66/75] package/python-unittest-xml-reporting: bump version to 4.0.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 67/75] package/python-urwid: " Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 68/75] package/python-uswid: bump version to 0.6.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 69/75] package/python-uvicorn: bump version to 0.46.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 70/75] package/python-werkzeug: bump version to 3.1.8 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 71/75] package/python-wheel: security bump version to 0.47.0 Bernd Kuhls
2026-05-02 12:05 ` Julien Olivain via buildroot
2026-05-01 12:30 ` [Buildroot] [PATCH 72/75] package/python-xmodem: bump version to 0.5.0 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 73/75] package/python-zope-interface: bump version to 8.4 Bernd Kuhls
2026-05-01 12:30 ` [Buildroot] [PATCH 74/75] package/python-pylru: bump version to 1.3.1 Bernd Kuhls
2026-05-01 12:31 ` [Buildroot] [PATCH 75/75] package/python-cssutils: bump version to 2.15.0 Bernd Kuhls
2026-05-03 14:51 ` [Buildroot] [PATCH 01/75] package/python-aiohttp: bump version to 3.13.5 Julien Olivain via buildroot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260501123100.1918951-9-bernd@kuhls.net \
--to=bernd@kuhls.net \
--cc=buildroot@buildroot.org \
--cc=cvubrugier@fastmail.fm \
--cc=fiona.klute@gmx.de \
--cc=flavio.tapajos@newtesc.com.br \
--cc=grzegorz@blach.pl \
--cc=guillaume.bressaix@gmail.com \
--cc=hyfinglists@gmail.com \
--cc=jagan@amarulasolutions.com \
--cc=james.hilliard1@gmail.com \
--cc=joseph.kogut@gmail.com \
--cc=ludovic.desroches@microchip.com \
--cc=m.niestroj@grinn-global.com \
--cc=martin@geanix.com \
--cc=mc5686@mclink.it \
--cc=raphael.melotte@mind.be \
--cc=thomas.petazzoni@bootlin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox