From 6d4e69b9f59c521eb41c756b175dc57a0ebc3784 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 26 Aug 2023 13:23:21 +0200 Subject: [PATCH] package/python3: security bump version to 3.11.5 Added md5 hash provided by upstream. Release notes: https://www.python.org/downloads/release/python-3115/ Fixes CVE-2023-40217. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit a26fa40853ff6033647f034d16270cdc66e22469) Signed-off-by: Peter Korsgaard --- package/python3/python3.hash | 4 +++- package/python3/python3.mk | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/package/python3/python3.hash b/package/python3/python3.hash index 6c43e01a44..1a0fee3290 100644 --- a/package/python3/python3.hash +++ b/package/python3/python3.hash @@ -1,3 +1,5 @@ +# From https://www.python.org/downloads/release/python-3115/ +md5 393856f1b7713aa8bba4b642ab9985d3 Python-3.11.5.tar.xz # Locally computed -sha256 2f0e409df2ab57aa9fc4cbddfb976af44e4e55bf6f619eee6bc5c2297264a7f6 Python-3.11.4.tar.xz +sha256 85cd12e9cf1d6d5a45f17f7afe1cebe7ee628d3282281c492e86adf636defa3f Python-3.11.5.tar.xz sha256 3b2f81fe21d181c499c59a256c8e1968455d6689d269aa85373bfb6af41da3bf LICENSE diff --git a/package/python3/python3.mk b/package/python3/python3.mk index bdb7cfd22f..5f8fa5b58d 100644 --- a/package/python3/python3.mk +++ b/package/python3/python3.mk @@ -5,7 +5,7 @@ ################################################################################ PYTHON3_VERSION_MAJOR = 3.11 -PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).4 +PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).5 PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION) PYTHON3_LICENSE = Python-2.0, others