mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 00:04:06 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/python3: security bump to v3.12.13

Browse Source 
See the release notes: https://www.python.org/downloads/release/python-31213/

This fixes a handful of bugs and the following vulnerability:
- CVE-2024-6923:
    There is a MEDIUM severity vulnerability affecting CPython.  The
    email module didn’t properly quote newlines for email headers when
    serializing an email message allowing for header injection when an
    email  is serialized.
    https://www.cve.org/CVERecord?id=CVE-2024-6923

This also includes a mitigation for a libexpat vulnerability:
- CVE-2025-59375:
    libexpat in Expat before 2.7.2 allows attackers to trigger large
    dynamic memory allocations via a small document that is submitted for
    parsing.
    https://www.cve.org/CVERecord?id=CVE-2025-59375

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit f862711b10)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Titouan Christophe
2026-04-17 11:18:00 +02:00
committed by Thomas Perale
parent 212700b9d5
commit 4afa94f4fb
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
package/python3/python3.hash
View File

@@ -1,5 +1,5 @@
# From https://www.python.org/downloads/release/python-31211/
md5 04feb01316c7bb1b448001adbc63dd23 Python-3.12.12.tar.xz
# From https://www.python.org/downloads/release/python-31213/
md5 b67dc5d55b27c98a36615f7d0dfa6e4c Python-3.12.13.tar.xz
# Locally computed
sha256 fb85a13414b028c49ba18bbd523c2d055a30b56b18b92ce454ea2c51edc656c4 Python-3.12.12.tar.xz
sha256 c08bc65a81971c1dd5783182826503369466c7e67374d1646519adf05207b684 Python-3.12.13.tar.xz
sha256 3b2f81fe21d181c499c59a256c8e1968455d6689d269aa85373bfb6af41da3bf LICENSE

2
package/python3/python3.mk
View File

@@ -5,7 +5,7 @@
################################################################################
PYTHON3_VERSION_MAJOR = 3.12
PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).12
PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).13
PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz
PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION)
PYTHON3_LICENSE = Python-2.0, others