[Buildroot] [PATCH] package/python3: security bump to 3.12.2

[Buildroot] [PATCH] package/python3: security bump to 3.12.2

[Marcus Hoffmann via buildroot]

Fixes the following security issue:
  * Skip .pth files with names starting with a dot or hidden file
    attribute. [1]

[1] https://docs.python.org/release/3.12.2/whatsnew/changelog.html#security
---
 package/python3/python3.hash | 6 +++---
 package/python3/python3.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package/python3/python3.hash b/package/python3/python3.hash
index 725c854050..611b8d0432 100644
--- a/package/python3/python3.hash
+++ b/package/python3/python3.hash
@@ -1,5 +1,5 @@
-# From https://www.python.org/downloads/release/python-3121/
-md5  50f827c800483776c8ef86e6a53831fa  Python-3.12.1.tar.xz
+# From https://www.python.org/downloads/release/python-3122/
+md5  e7c178b97bf8f7ccd677b94d614f7b3c  Python-3.12.2.tar.xz
 # Locally computed
-sha256  8dfb8f426fcd226657f9e2bd5f1e96e53264965176fa17d32658e873591aeb21  Python-3.12.1.tar.xz
+sha256  be28112dac813d2053545c14bf13a16401a21877f1a69eb6ea5d84c4a0f3d870  Python-3.12.2.tar.xz
 sha256  3b2f81fe21d181c499c59a256c8e1968455d6689d269aa85373bfb6af41da3bf  LICENSE
diff --git a/package/python3/python3.mk b/package/python3/python3.mk
index 42765abcf4..e500155c80 100644
--- a/package/python3/python3.mk
+++ b/package/python3/python3.mk
@@ -5,7 +5,7 @@
 ################################################################################
 
 PYTHON3_VERSION_MAJOR = 3.12
-PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).1
+PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).2
 PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz
 PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION)
 PYTHON3_LICENSE = Python-2.0, others
-- 
2.34.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/python3: security bump to 3.12.2

[Peter Korsgaard]

>>>>> "Marcus" == Marcus Hoffmann via buildroot <buildroot@buildroot.org> writes:


 > Fixes the following security issue:
 >   * Skip .pth files with names starting with a dot or hidden file
 >     attribute. [1]

 > [1] https://docs.python.org/release/3.12.2/whatsnew/changelog.html#security

I have in the man time reverted the 3.12.x bump for now because of
issues, so I have instead applied a bump to 3.11.8, which contains the
same security fix.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/python3: security bump to 3.12.2

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

>>>>> "Marcus" == Marcus Hoffmann via buildroot <buildroot@buildroot.org> writes:
 >> Fixes the following security issue:
 >> * Skip .pth files with names starting with a dot or hidden file
 >> attribute. [1]

 >> [1] https://docs.python.org/release/3.12.2/whatsnew/changelog.html#security

 > I have in the man time reverted the 3.12.x bump for now because of

s/man/mean/ naturally.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot