From 8172d3f70c97ceed5eb99b08c3cc3328759924ab Mon Sep 17 00:00:00 2001 From: Wang Mingyu Date: Thu, 1 Jun 2023 17:03:34 +0800 Subject: python3-requests: upgrade 2.30.0 -> 2.31.0 Changelog: ========== Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization headers to destination servers when following HTTPS redirects. (From OE-Core rev: 97bdf3baf6e612757863e05e84e3b79c4330d27b) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie --- .../python/python3-requests_2.30.0.bb | 26 ---------------------- .../python/python3-requests_2.31.0.bb | 26 ++++++++++++++++++++++ 2 files changed, 26 insertions(+), 26 deletions(-) delete mode 100644 meta/recipes-devtools/python/python3-requests_2.30.0.bb create mode 100644 meta/recipes-devtools/python/python3-requests_2.31.0.bb (limited to 'meta/recipes-devtools') diff --git a/meta/recipes-devtools/python/python3-requests_2.30.0.bb b/meta/recipes-devtools/python/python3-requests_2.30.0.bb deleted file mode 100644 index 1286eba786..0000000000 --- a/meta/recipes-devtools/python/python3-requests_2.30.0.bb +++ /dev/null @@ -1,26 +0,0 @@ -SUMMARY = "Python HTTP for Humans." -HOMEPAGE = "http://python-requests.org" -LICENSE = "Apache-2.0" -LIC_FILES_CHKSUM = "file://LICENSE;md5=34400b68072d710fecd0a2940a0d1658" - -SRC_URI[sha256sum] = "239d7d4458afcb28a692cdd298d87542235f4ca8d36d03a15bfc128a6559a2f4" - -inherit pypi setuptools3 - -RDEPENDS:${PN} += " \ - ${PYTHON_PN}-email \ - ${PYTHON_PN}-json \ - ${PYTHON_PN}-ndg-httpsclient \ - ${PYTHON_PN}-netserver \ - ${PYTHON_PN}-pyasn1 \ - ${PYTHON_PN}-pyopenssl \ - ${PYTHON_PN}-pysocks \ - ${PYTHON_PN}-urllib3 \ - ${PYTHON_PN}-chardet \ - ${PYTHON_PN}-idna \ - ${PYTHON_PN}-compression \ -" - -CVE_PRODUCT = "requests" - -BBCLASSEXTEND = "native nativesdk" diff --git a/meta/recipes-devtools/python/python3-requests_2.31.0.bb b/meta/recipes-devtools/python/python3-requests_2.31.0.bb new file mode 100644 index 0000000000..7ac43f2eb9 --- /dev/null +++ b/meta/recipes-devtools/python/python3-requests_2.31.0.bb @@ -0,0 +1,26 @@ +SUMMARY = "Python HTTP for Humans." +HOMEPAGE = "http://python-requests.org" +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://LICENSE;md5=34400b68072d710fecd0a2940a0d1658" + +SRC_URI[sha256sum] = "942c5a758f98d790eaed1a29cb6eefc7ffb0d1cf7af05c3d2791656dbd6ad1e1" + +inherit pypi setuptools3 + +RDEPENDS:${PN} += " \ + ${PYTHON_PN}-email \ + ${PYTHON_PN}-json \ + ${PYTHON_PN}-ndg-httpsclient \ + ${PYTHON_PN}-netserver \ + ${PYTHON_PN}-pyasn1 \ + ${PYTHON_PN}-pyopenssl \ + ${PYTHON_PN}-pysocks \ + ${PYTHON_PN}-urllib3 \ + ${PYTHON_PN}-chardet \ + ${PYTHON_PN}-idna \ + ${PYTHON_PN}-compression \ +" + +CVE_PRODUCT = "requests" + +BBCLASSEXTEND = "native nativesdk" -- cgit v1.2.3-54-g00ecf