| Message ID | 20261109063150.3840618-2-tim.orling@konsulko.com |
|---|---|
| State | New |
| Headers | show |
| Series | python3-websockets: upgrade 17.1 -> 17.4 | expand |
diff --git a/meta/recipes-devtools/python/python3-websockets_17.1.bb b/meta/recipes-devtools/python/python3-websockets_17.4.bb similarity index 79% rename from meta/recipes-devtools/python/python3-websockets_17.1.bb rename to meta/recipes-devtools/python/python3-websockets_17.4.bb index b5ee3ec661..81c8ebed2a 100644 --- a/meta/recipes-devtools/python/python3-websockets_17.1.bb +++ b/meta/recipes-devtools/python/python3-websockets_17.4.bb @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=51924a6af4495b8cfaee1b1da869b6f4" inherit pypi python_setuptools_build_meta -SRC_URI[sha256sum] = "acfea4c20bf54384883ea33b1240fc1db4f52e190823a4e2b334bc3e8bfca96a" +SRC_URI[sha256sum] = "09d3939b70df0c8ad2da145ebd50978bccaee1d565e838b0e7921a34d38571eb" BBCLASSEXTEND = "native nativesdk"
17.4 fixes a denial of service by memory exhaustion: recv() now rejects fragmented messages split into more than 4096 frames (tunable via WEBSOCKETS_MAX_FRAGMENTS). 17.2 and 17.3 are bug fix releases. https://websockets.readthedocs.io/en/stable/project/changelog.html https://github.com/python-websockets/websockets/compare/17.1...17.4 Tested with the python3-uvicorn ptest on qemux86-64 and the bitbake hashserv websocket tests from buildtools-tarball. AI-Generated: Uses Claude Code (Claude Opus 5.5) Signed-off-by: Tim Orling <tim.orling@konsulko.com> --- .../{python3-websockets_17.1.bb => python3-websockets_17.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-websockets_17.1.bb => python3-websockets_17.4.bb} (79%)