* [Buildroot] [PATCH 1/1] package/python-aiohttp: security bump to version 3.9.3
@ 2024-03-01 20:15 Fabrice Fontaine
2024-03-01 21:03 ` Peter Korsgaard
0 siblings, 1 reply; 2+ messages in thread
From: Fabrice Fontaine @ 2024-03-01 20:15 UTC (permalink / raw)
To: buildroot; +Cc: James Hilliard, Fabrice Fontaine, Asaf Kahlon
Fix CVE-2024-23334 and CVE-2024-23829
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2
https://github.com/aio-libs/aiohttp/blob/v3.9.3/CHANGES.rst
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
package/python-aiohttp/python-aiohttp.hash | 4 ++--
package/python-aiohttp/python-aiohttp.mk | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/python-aiohttp/python-aiohttp.hash b/package/python-aiohttp/python-aiohttp.hash
index 374e66ae8d..542a46f032 100644
--- a/package/python-aiohttp/python-aiohttp.hash
+++ b/package/python-aiohttp/python-aiohttp.hash
@@ -1,5 +1,5 @@
# md5, sha256 from https://pypi.org/pypi/aiohttp/json
-md5 264e1b4fbe9f09050523c03f4d9b5ee2 aiohttp-3.9.1.tar.gz
-sha256 8fc49a87ac269d4529da45871e2ffb6874e87779c3d0e2ccd813c0899221239d aiohttp-3.9.1.tar.gz
+md5 f237bcac4ade112b9e7c4b1098197244 aiohttp-3.9.3.tar.gz
+sha256 90842933e5d1ff760fae6caca4b2b3edba53ba8f4b71e95dacf2818a2aca06f7 aiohttp-3.9.3.tar.gz
# Locally computed sha256 checksums
sha256 9f80d0db7d755a941db4572172c270ecbd8f082ba215ddd095985942ed94a9eb LICENSE.txt
diff --git a/package/python-aiohttp/python-aiohttp.mk b/package/python-aiohttp/python-aiohttp.mk
index 3dc822e832..315d68cb2e 100644
--- a/package/python-aiohttp/python-aiohttp.mk
+++ b/package/python-aiohttp/python-aiohttp.mk
@@ -4,9 +4,9 @@
#
################################################################################
-PYTHON_AIOHTTP_VERSION = 3.9.1
+PYTHON_AIOHTTP_VERSION = 3.9.3
PYTHON_AIOHTTP_SOURCE = aiohttp-$(PYTHON_AIOHTTP_VERSION).tar.gz
-PYTHON_AIOHTTP_SITE = https://files.pythonhosted.org/packages/54/07/9467d3f8dae29b14f423b414d9e67512a76743c5bb7686fb05fe10c9cc3e
+PYTHON_AIOHTTP_SITE = https://files.pythonhosted.org/packages/18/93/1f005bbe044471a0444a82cdd7356f5120b9cf94fe2c50c0cdbf28f1258b
PYTHON_AIOHTTP_SETUP_TYPE = setuptools
PYTHON_AIOHTTP_LICENSE = Apache-2.0
PYTHON_AIOHTTP_LICENSE_FILES = LICENSE.txt
--
2.43.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2024-03-01 21:03 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-03-01 20:15 [Buildroot] [PATCH 1/1] package/python-aiohttp: security bump to version 3.9.3 Fabrice Fontaine
2024-03-01 21:03 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox