From 7511b1793292e02e10eafbe5ac31303c9274a8b5 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Mon, 5 Jun 2023 01:33:24 -0600 Subject: [PATCH] package/python-requests: security bump to version 2.31.0 Fixes the following security issue: - CVE-2023-32681: Unintended leak of Proxy-Authorization header https://github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q Signed-off-by: James Hilliard Signed-off-by: Arnout Vandecappelle (cherry picked from commit c94922beac62e66a993e0a6bc14567af4827d8d1) [Peter: mark as security bump] Signed-off-by: Peter Korsgaard --- package/python-requests/python-requests.hash | 4 ++-- package/python-requests/python-requests.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-requests/python-requests.hash b/package/python-requests/python-requests.hash index b6f696000b..c4aeabb25d 100644 --- a/package/python-requests/python-requests.hash +++ b/package/python-requests/python-requests.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/requests/json -md5 09b752e0b0a672d805ae54455c128d42 requests-2.28.2.tar.gz -sha256 98b1b2782e3c6c4904938b84c0eb932721069dfdb9134313beff7c83c2df24bf requests-2.28.2.tar.gz +md5 941e175c276cd7d39d098092c56679a4 requests-2.31.0.tar.gz +sha256 942c5a758f98d790eaed1a29cb6eefc7ffb0d1cf7af05c3d2791656dbd6ad1e1 requests-2.31.0.tar.gz # Locally computed sha256 checksums sha256 09e8a9bcec8067104652c168685ab0931e7868f9c8284b66f5ae6edae5f1130b LICENSE diff --git a/package/python-requests/python-requests.mk b/package/python-requests/python-requests.mk index 8f9f4b2db4..2c74db3711 100644 --- a/package/python-requests/python-requests.mk +++ b/package/python-requests/python-requests.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_REQUESTS_VERSION = 2.28.2 +PYTHON_REQUESTS_VERSION = 2.31.0 PYTHON_REQUESTS_SOURCE = requests-$(PYTHON_REQUESTS_VERSION).tar.gz -PYTHON_REQUESTS_SITE = https://files.pythonhosted.org/packages/9d/ee/391076f5937f0a8cdf5e53b701ffc91753e87b07d66bae4a09aa671897bf +PYTHON_REQUESTS_SITE = https://files.pythonhosted.org/packages/9d/be/10918a2eac4ae9f02f6cfe6414b7a155ccd8f7f9d4380d62fd5b955065c3 PYTHON_REQUESTS_SETUP_TYPE = setuptools PYTHON_REQUESTS_LICENSE = Apache-2.0 PYTHON_REQUESTS_LICENSE_FILES = LICENSE