| Message ID | 20260805045919.233514-1-hthakar@cisco.com |
|---|---|
| State | Rejected, archived |
| Delegated to: | Anuj Mittal |
| Headers | show |
| Series | [meta-python,wrynose,1/2] python3-pyjwt: upgrade 2.12.1 -> 2.13.0 | expand |
On Wed, Aug 5, 2026 at 1:02 PM Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.openembedded.org <hthakar=cisco.com@lists.openembedded.org> wrote: > > From: Wang Mingyu <wangmy@fujitsu.com> > > This upgrade fixes CVE-2026-48522, CVE-2026-48524, > CVE-2026-48525 and CVE-2026-48526. > > Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> > Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> > (cherry picked from commit 0a60a9b758eedcf803b426a3f9327a20a5a7db53) > Signed-off-by: Hetvi Thakar <hthakar@cisco.com> > --- > .../python/{python3-pyjwt_2.12.1.bb => python3-pyjwt_2.13.0.bb} | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > rename meta-python/recipes-devtools/python/{python3-pyjwt_2.12.1.bb => python3-pyjwt_2.13.0.bb} (85%) This version includes changes that may change behavior changes for environments. Would it be possible to backport the CVE fixes instead? > > diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb > similarity index 85% > rename from meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb > rename to meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb > index eb445f9c91..140d3bf3e4 100644 > --- a/meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb > +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb > @@ -5,7 +5,7 @@ HOMEPAGE = "https://github.com/jpadilla/pyjwt" > LICENSE = "MIT" > LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551" > > -SRC_URI[sha256sum] = "c74a7a2adf861c04d002db713dd85f84beb242228e671280bf709d765b03672b" > +SRC_URI[sha256sum] = "41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423" > > PYPI_PACKAGE = "pyjwt" > CVE_PRODUCT = "pyjwt" > -- > 2.35.6 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#128789): https://lists.openembedded.org/g/openembedded-devel/message/128789 > Mute This Topic: https://lists.openembedded.org/mt/120606157/3616702 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [anuj.mittal@oss.qualcomm.com] > -=-=-=-=-=-=-=-=-=-=-=- >
diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb similarity index 85% rename from meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb rename to meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb index eb445f9c91..140d3bf3e4 100644 --- a/meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb @@ -5,7 +5,7 @@ HOMEPAGE = "https://github.com/jpadilla/pyjwt" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551" -SRC_URI[sha256sum] = "c74a7a2adf861c04d002db713dd85f84beb242228e671280bf709d765b03672b" +SRC_URI[sha256sum] = "41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423" PYPI_PACKAGE = "pyjwt" CVE_PRODUCT = "pyjwt"