diff mbox series

[5/5] python3-websockets: upgrade 17.1 -> 17.4

Message ID 20261102011816.3710992-5-tim.orling@konsulko.com
State Under Review
Headers show
Series [1/5] python3-uvloop: import 0.22.1 from meta-homeassistant | expand

Commit Message

Tim Orling Nov. 2, 2026, 1:18 a.m. UTC 
From: Tim Orling <tim.orling@konsulko.com>

17.4 fixes a denial of service by memory exhaustion: recv() now rejects
fragmented messages split into more than 4096 frames (tunable via
WEBSOCKETS_MAX_FRAGMENTS). 17.2 and 17.3 are bug fix releases.

17.3 added uvloop variants of the asyncio tests, so add python3-uvloop
to the ptest dependencies.

https://websockets.readthedocs.io/en/stable/project/changelog.html
https://github.com/python-websockets/websockets/compare/17.1...17.4

Tested with core-image-ptest-python3-websockets on qemux86-64 (kvm,
slirp): 2550 passed, 114 skipped, 0 failed.

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
---
 .../{python3-websockets_17.1.bb => python3-websockets_17.4.bb} | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-websockets_17.1.bb => python3-websockets_17.4.bb} (89%)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-websockets_17.1.bb b/meta/recipes-devtools/python/python3-websockets_17.4.bb
similarity index 89%
rename from meta/recipes-devtools/python/python3-websockets_17.1.bb
rename to meta/recipes-devtools/python/python3-websockets_17.4.bb
index d1bec373e0..a2357ebee6 100644
--- a/meta/recipes-devtools/python/python3-websockets_17.1.bb
+++ b/meta/recipes-devtools/python/python3-websockets_17.4.bb
@@ -9,7 +9,7 @@  SRC_URI = "\
     git://github.com/python-websockets/websockets;branch=main;protocol=https;tag=${PV} \
     file://run-ptest \
 "
-SRCREV = "e87ea9be0373edd5065b5e94dfa714cfde23023b"
+SRCREV = "625a59ed613ac60e60d577dd64b8641d59ecb2b1"
 
 CVE_PRODUCT = "websockets_project:websockets"
 
@@ -23,4 +23,5 @@  RDEPENDS:${PN} = " \
 
 RDEPENDS:${PN}-ptest += "\
     python3-misc \
+    python3-uvloop \
 "