From 8b965c2665aec8ac82d1d32c554d70cd8ffb45b0 Mon Sep 17 00:00:00 2001 From: Marcus Hoffmann Date: Fri, 10 Apr 2026 16:57:06 +0200 Subject: [PATCH] package/python-gpiod: security bump to 2.4.2 Update for libgpiod v2.2.4. Contains the following security fix: https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/commit/?h=python-v2.4.x&id=c3655b5f641b87656c11da3ac708608d2c0e05ee The package now contains a proper LICENSE file in the sdist since: https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/commit/?h=python-v2.4.x&id=51ee19fe1ec8a94b5ecfdc7627b0c574c7874a1b Note: this commit is marked as "security" update because it contains security related bugfixes, but no CVE or advisory are published at the time of this commit. Signed-off-by: Marcus Hoffmann [Julien: add note in the commit log] Signed-off-by: Julien Olivain --- package/python-gpiod/python-gpiod.hash | 6 +++--- package/python-gpiod/python-gpiod.mk | 7 +++---- 2 files changed, 6 insertions(+), 7 deletions(-) diff --git a/package/python-gpiod/python-gpiod.hash b/package/python-gpiod/python-gpiod.hash index dfaafd4d4c..d3277c5a20 100644 --- a/package/python-gpiod/python-gpiod.hash +++ b/package/python-gpiod/python-gpiod.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/gpiod/json -md5 62cf044aa3214d0ebee6aef78db2aa52 gpiod-2.4.0.tar.gz -sha256 9243a1a59d084ec749d1df4a1e2f238ffb9d94515b0d9f5335460175143c3aa1 gpiod-2.4.0.tar.gz +md5 c9c2fb67d78204896d85a7945314356f gpiod-2.4.2.tar.gz +sha256 602aae17ff365bb8e2a30ce65c6bbf2d8e7a7e64bf016e82e4fd4c730ef69ab7 gpiod-2.4.2.tar.gz # Locally computed sha256 checksums -sha256 a2b24e2158144b22a77a6a404fc5a05911612c5b99d7ab6d0e2addcaeb7514a3 pyproject.toml +sha256 592987e8510228d546540b84a22444bde98e48d03078d3b2eefcd889bec5ce8c LICENSE diff --git a/package/python-gpiod/python-gpiod.mk b/package/python-gpiod/python-gpiod.mk index 8ab901972e..6881f0df43 100644 --- a/package/python-gpiod/python-gpiod.mk +++ b/package/python-gpiod/python-gpiod.mk @@ -4,13 +4,12 @@ # ################################################################################ -PYTHON_GPIOD_VERSION = 2.4.0 +PYTHON_GPIOD_VERSION = 2.4.2 PYTHON_GPIOD_SOURCE = gpiod-$(PYTHON_GPIOD_VERSION).tar.gz -PYTHON_GPIOD_SITE = https://files.pythonhosted.org/packages/0c/dc/5a6bd309345bd9cfa7e098174ab7e65367e408539b6c1998e4f267c673cd +PYTHON_GPIOD_SITE = https://files.pythonhosted.org/packages/13/ca/b3bd043091b4462d6c5561f86581f553df102d8990c37938ddbff2823016 PYTHON_GPIOD_SETUP_TYPE = setuptools PYTHON_GPIOD_LICENSE = LGPL-2.1+ -# The package license follows libgpiod's license but doesn't include the LICENSE text in the pypi distrobuted package again -PYTHON_GPIOD_LICENSE_FILES = pyproject.toml +PYTHON_GPIOD_LICENSE_FILES = LICENSE PYTHON_GPIOD_DEPENDENCIES = libgpiod2 PYTHON_GPIOD_ENV = LINK_SYSTEM_LIBGPIOD=1