package/python-bottle: security bump to version 0.12.21

- Fix CVE-2022-31799: Bottle before 0.12.20 mishandles errors during
  early request binding.
- Update indentation in hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
This commit is contained in:
Fabrice Fontaine 2022-06-15 23:07:24 +02:00 committed by Yann E. MORIN
parent 008ab9474e
commit 5deea4be64
2 changed files with 5 additions and 5 deletions

View File

@ -1,5 +1,5 @@
# md5, sha256 from https://pypi.org/pypi/bottle/json
md5 50075544706b5e662a3fbd9a98e24b07 bottle-0.12.19.tar.gz
sha256 a9d73ffcbc6a1345ca2d7949638db46349f5b2b77dac65d6494d45c23628da2c bottle-0.12.19.tar.gz
md5 4934ad7347eef30db669ccd05283a5e0 bottle-0.12.21.tar.gz
sha256 787c61b6cc02b9c229bf2663011fac53dd8fc197f7f8ad2eeede29d888d7887e bottle-0.12.21.tar.gz
# Locally computed sha256 checksums
sha256 d0e7211f1c3c1a1c56f39d18bcb07f27f480c8a9552617756dda3a335933b8a6 LICENSE
sha256 d0e7211f1c3c1a1c56f39d18bcb07f27f480c8a9552617756dda3a335933b8a6 LICENSE

View File

@ -4,9 +4,9 @@
#
################################################################################
PYTHON_BOTTLE_VERSION = 0.12.19
PYTHON_BOTTLE_VERSION = 0.12.21
PYTHON_BOTTLE_SOURCE = bottle-$(PYTHON_BOTTLE_VERSION).tar.gz
PYTHON_BOTTLE_SITE = https://files.pythonhosted.org/packages/ea/80/3d2dca1562ffa1929017c74635b4cb3645a352588de89e90d0bb53af3317
PYTHON_BOTTLE_SITE = https://files.pythonhosted.org/packages/95/e3/5749d7657b6fb38d65afb3c0b345514a783de7a9feb4fab594fa0bacc2a0
PYTHON_BOTTLE_LICENSE = MIT
PYTHON_BOTTLE_LICENSE_FILES = LICENSE
PYTHON_BOTTLE_CPE_ID_VENDOR = bottlepy