From 80ade2cbab3eb55753fd237505082f368f911082 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Fri, 13 Dec 2024 18:09:21 +0100 Subject: [PATCH] package/python3: security bump to version 3.11.11 gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the mapped IPv4 address value for deciding properties. Properties which have their behavior fixed are is_multicast, is_reserved, is_link_local, is_global, and is_unspecified. https://github.com/python/cpython/issues/122792 CVE-2024-9287, gh-124651: Properly quote template strings in venv activation scripts. https://github.com/python/cpython/issues/124651 Signed-off-by: Peter Korsgaard --- package/python3/python3.hash | 6 +++--- package/python3/python3.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python3/python3.hash b/package/python3/python3.hash index c11e79ca83..02d4df80c7 100644 --- a/package/python3/python3.hash +++ b/package/python3/python3.hash @@ -1,5 +1,5 @@ -# From https://www.python.org/downloads/release/python-31110/ -md5 af59e243df4c7019f941ae51891c10bc Python-3.11.10.tar.xz +# From https://www.python.org/downloads/release/python-31111/ +md5 3e497037b170fe4be5f462c4964596f2 Python-3.11.11.tar.xz # Locally computed -sha256 07a4356e912900e61a15cb0949a06c4a05012e213ecd6b4e84d0f67aabbee372 Python-3.11.10.tar.xz +sha256 2a9920c7a0cd236de33644ed980a13cbbc21058bfdc528febb6081575ed73be3 Python-3.11.11.tar.xz sha256 3b2f81fe21d181c499c59a256c8e1968455d6689d269aa85373bfb6af41da3bf LICENSE diff --git a/package/python3/python3.mk b/package/python3/python3.mk index 6a6fcaeb2e..7a8c2b3053 100644 --- a/package/python3/python3.mk +++ b/package/python3/python3.mk @@ -5,7 +5,7 @@ ################################################################################ PYTHON3_VERSION_MAJOR = 3.11 -PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).10 +PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).11 PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION) PYTHON3_LICENSE = Python-2.0, others