guix_mirror_bot pushed a commit to branch python-team
in repository guix.
commit 79bbbf1ce8079181b523f0e908d7e5d4c735b1b0
Author: Hugo Buddelmeijer <[email protected]>
AuthorDate: Tue May 26 22:38:33 2026 +0200
gnu: python-multipart: Update to 0.0.29 [security-fixes].
Release notes since 0.0.20 (2024-12-16):
- 0.0.29 (2026-05-17)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.29>.
- 0.0.28 (2026-05-10)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.28>.
- 0.0.27 (2026-04-27)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.27>.
- 0.0.26 (2026-04-10)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.26>.
- 0.0.25 (2026-04-10)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.25>.
- 0.0.24 (2026-04-05)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.24>.
- 0.0.23 (2026-04-05)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.23>.
- 0.0.22 (2026-01-25)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.22>.
- 0.0.21 (2025-12-17)
<https://github.com/Kludex/python-multipart/releases/tag/0.0.21>.
Contains fixes for:
CVE-2026-24486: Arbitrary File Write via Non-Default Configuration.
CVE-2026-40347: Denial of Service via large multipart preamble or
epilogue data.
* gnu/packages/python-xyz.scm (python-multipart): Update to 0.0.29.
[source]: Switch to git-fetch.
[home-page]: Follow redirect.
Merges: guix/guix!8860
Change-Id: I9c3f2acb0f7accfc37a504621239d1e09f47b18d
Signed-off-by: Sharlatan Hellseher <[email protected]>
---
gnu/packages/python-xyz.scm | 19 +++++++++++--------
1 file changed, 11 insertions(+), 8 deletions(-)
diff --git a/gnu/packages/python-xyz.scm b/gnu/packages/python-xyz.scm
index f2c0203c48..e539d56c89 100644
--- a/gnu/packages/python-xyz.scm
+++ b/gnu/packages/python-xyz.scm
@@ -35307,19 +35307,22 @@ for styling strings in the terminal.")
(define-public python-multipart
(package
(name "python-multipart")
- (version "0.0.20")
- (source (origin
- (method url-fetch)
- (uri (pypi-uri "python_multipart" version))
- (sha256
- (base32
- "04wxzakk3hs4z4xf3ldhym3gm46hjicn4iwiw150c8wfbfscml4d"))))
+ (version "0.0.29")
+ (source
+ (origin
+ (method git-fetch)
+ (uri (git-reference
+ (url "https://github.com/Kludex/python-multipart";)
+ (commit version)))
+ (file-name (git-file-name name version))
+ (sha256
+ (base32 "06rxa2xymdqri8zydy7xw2cnpsnzlv2jzdy9g86m5fpfca0pp9fm"))))
(build-system pyproject-build-system)
(native-inputs
(list python-hatchling
python-pytest
python-pyyaml))
- (home-page "https://github.com/andrew-d/python-multipart";)
+ (home-page "https://github.com/Kludex/python-multipart";)
(synopsis "Streaming multipart parser for Python")
(description
"This package provides a streaming multipart parser for Python.")
