From 5deea4be64a62e9b5fb4f0085b14d712e3921ac9 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Wed, 15 Jun 2022 23:07:24 +0200 Subject: [PATCH] package/python-bottle: security bump to version 0.12.21 - Fix CVE-2022-31799: Bottle before 0.12.20 mishandles errors during early request binding. - Update indentation in hash file (two spaces) Signed-off-by: Fabrice Fontaine Signed-off-by: Yann E. MORIN --- package/python-bottle/python-bottle.hash | 6 +++--- package/python-bottle/python-bottle.mk | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/python-bottle/python-bottle.hash b/package/python-bottle/python-bottle.hash index 7dcaac8dc6..b1cc2aac20 100644 --- a/package/python-bottle/python-bottle.hash +++ b/package/python-bottle/python-bottle.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/bottle/json -md5 50075544706b5e662a3fbd9a98e24b07 bottle-0.12.19.tar.gz -sha256 a9d73ffcbc6a1345ca2d7949638db46349f5b2b77dac65d6494d45c23628da2c bottle-0.12.19.tar.gz +md5 4934ad7347eef30db669ccd05283a5e0 bottle-0.12.21.tar.gz +sha256 787c61b6cc02b9c229bf2663011fac53dd8fc197f7f8ad2eeede29d888d7887e bottle-0.12.21.tar.gz # Locally computed sha256 checksums -sha256 d0e7211f1c3c1a1c56f39d18bcb07f27f480c8a9552617756dda3a335933b8a6 LICENSE +sha256 d0e7211f1c3c1a1c56f39d18bcb07f27f480c8a9552617756dda3a335933b8a6 LICENSE diff --git a/package/python-bottle/python-bottle.mk b/package/python-bottle/python-bottle.mk index d19a439f8c..ffea59f38f 100644 --- a/package/python-bottle/python-bottle.mk +++ b/package/python-bottle/python-bottle.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_BOTTLE_VERSION = 0.12.19 +PYTHON_BOTTLE_VERSION = 0.12.21 PYTHON_BOTTLE_SOURCE = bottle-$(PYTHON_BOTTLE_VERSION).tar.gz -PYTHON_BOTTLE_SITE = https://files.pythonhosted.org/packages/ea/80/3d2dca1562ffa1929017c74635b4cb3645a352588de89e90d0bb53af3317 +PYTHON_BOTTLE_SITE = https://files.pythonhosted.org/packages/95/e3/5749d7657b6fb38d65afb3c0b345514a783de7a9feb4fab594fa0bacc2a0 PYTHON_BOTTLE_LICENSE = MIT PYTHON_BOTTLE_LICENSE_FILES = LICENSE PYTHON_BOTTLE_CPE_ID_VENDOR = bottlepy