From aefdca1e5cf75ef0322b5a9d9052e9fc683f5a41 Mon Sep 17 00:00:00 2001 From: Marcus Hoffmann Date: Tue, 10 Jun 2025 17:05:24 +0200 Subject: [PATCH] package/python-requests: security bump to 2.32.4 Fixes: CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. Release notes: https://github.com/psf/requests/releases/tag/v2.32.4 Signed-off-by: Marcus Hoffmann Signed-off-by: Julien Olivain --- package/python-requests/python-requests.hash | 4 ++-- package/python-requests/python-requests.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-requests/python-requests.hash b/package/python-requests/python-requests.hash index 2764a0f2d2..c391d553c9 100644 --- a/package/python-requests/python-requests.hash +++ b/package/python-requests/python-requests.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/requests/json -md5 fa3ee5ac3f1b3f4368bd74ab530d3f0f requests-2.32.3.tar.gz -sha256 55365417734eb18255590a9ff9eb97e9e1da868d4ccd6402399eaf68af20a760 requests-2.32.3.tar.gz +md5 4a380c14fe0f4465c9dbf79ffacefd8f requests-2.32.4.tar.gz +sha256 27d0316682c8a29834d3264820024b62a36942083d52caf2f14c0591336d3422 requests-2.32.4.tar.gz # Locally computed sha256 checksums sha256 09e8a9bcec8067104652c168685ab0931e7868f9c8284b66f5ae6edae5f1130b LICENSE diff --git a/package/python-requests/python-requests.mk b/package/python-requests/python-requests.mk index fc8f51fd1f..c782060d57 100644 --- a/package/python-requests/python-requests.mk +++ b/package/python-requests/python-requests.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_REQUESTS_VERSION = 2.32.3 +PYTHON_REQUESTS_VERSION = 2.32.4 PYTHON_REQUESTS_SOURCE = requests-$(PYTHON_REQUESTS_VERSION).tar.gz -PYTHON_REQUESTS_SITE = https://files.pythonhosted.org/packages/63/70/2bf7780ad2d390a8d301ad0b550f1581eadbd9a20f896afe06353c2a2913 +PYTHON_REQUESTS_SITE = https://files.pythonhosted.org/packages/e1/0a/929373653770d8a0d7ea76c37de6e41f11eb07559b103b1c02cafb3f7cf8 PYTHON_REQUESTS_SETUP_TYPE = setuptools PYTHON_REQUESTS_LICENSE = Apache-2.0 PYTHON_REQUESTS_LICENSE_FILES = LICENSE