From efc22bcd2c18ba00335f7e076434cb34684d28e6 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 14 Mar 2026 15:06:26 +0100 Subject: [PATCH] package/python-wheel: security bump version to 0.46.3 https://github.com/pypa/wheel/blob/0.46.3/docs/news.rst Version 0.46.2 fixes CVE-2026-24049: wheel Allows Arbitrary File Permission Modification via Path Traversal Fixes: https://www.cve.org/CVERecord?id=CVE-2026-24049 Signed-off-by: Bernd Kuhls [Julien: mark the commit as "security" and add info in commit log] Signed-off-by: Julien Olivain (cherry picked from commit 635c145c16c11f90109f49b842c5a1b4184760d1) Signed-off-by: Thomas Perale --- package/python-wheel/python-wheel.hash | 4 ++-- package/python-wheel/python-wheel.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-wheel/python-wheel.hash b/package/python-wheel/python-wheel.hash index 40836a5d1c..7ec38ec86b 100644 --- a/package/python-wheel/python-wheel.hash +++ b/package/python-wheel/python-wheel.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/wheel/json -md5 dddc505d0573d03576c7c6c5a4fe0641 wheel-0.45.1.tar.gz -sha256 661e1abd9198507b1409a20c02106d9670b2576e916d58f520316666abca6729 wheel-0.45.1.tar.gz +md5 61fb0c9633fe7492933a8f338db23508 wheel-0.46.3.tar.gz +sha256 e3e79874b07d776c40bd6033f8ddf76a7dad46a7b8aa1b2787a83083519a1803 wheel-0.46.3.tar.gz # Locally computed sha256 checksums sha256 30c23618679108f3e8ea1d2a658c7ca417bdfc891c98ef1a89fa4ff0c9828654 LICENSE.txt diff --git a/package/python-wheel/python-wheel.mk b/package/python-wheel/python-wheel.mk index 417db7c167..b68a1c102b 100644 --- a/package/python-wheel/python-wheel.mk +++ b/package/python-wheel/python-wheel.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_WHEEL_VERSION = 0.45.1 +PYTHON_WHEEL_VERSION = 0.46.3 PYTHON_WHEEL_SOURCE = wheel-$(PYTHON_WHEEL_VERSION).tar.gz -PYTHON_WHEEL_SITE = https://files.pythonhosted.org/packages/8a/98/2d9906746cdc6a6ef809ae6338005b3f21bb568bea3165cfc6a243fdc25c +PYTHON_WHEEL_SITE = https://files.pythonhosted.org/packages/89/24/a2eb353a6edac9a0303977c4cb048134959dd2a51b48a269dfc9dde00c8a PYTHON_WHEEL_SETUP_TYPE = flit PYTHON_WHEEL_LICENSE = MIT PYTHON_WHEEL_LICENSE_FILES = LICENSE.txt