From: Richard Purdie <[email protected]> Upgrade Click to 8.3.3, the first upstream release containing the fix for CVE-2026-7246. The fix avoids constructing an editor shell command and passes the editor and filename as separate argv elements.
Signed-off-by: Richard Purdie <[email protected]> (cherry picked from commit 002ede0d89b43cfbe15651ea6c3d504626be24df) Signed-off-by: Darsh Kelaiya <[email protected]> --- .../python/{python3-click_8.3.1.bb => python3-click_8.3.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-click_8.3.1.bb => python3-click_8.3.3.bb} (91%) diff --git a/meta/recipes-devtools/python/python3-click_8.3.1.bb b/meta/recipes-devtools/python/python3-click_8.3.3.bb similarity index 91% rename from meta/recipes-devtools/python/python3-click_8.3.1.bb rename to meta/recipes-devtools/python/python3-click_8.3.3.bb index 1f42fe1a50..12fd3cbfbd 100644 --- a/meta/recipes-devtools/python/python3-click_8.3.1.bb +++ b/meta/recipes-devtools/python/python3-click_8.3.3.bb @@ -8,7 +8,7 @@ HOMEPAGE = "http://click.pocoo.org/"; LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=1fa98232fd645608937a0fdc82e999b8" -SRC_URI[sha256sum] = "12ff4785d337a1bb490bb7e9c2b1ee5da3112e94a8622f26a6c77f5d2fc6842a" +SRC_URI[sha256sum] = "398329ad4837b2ff7cbe1dd166a4c0f8900c3ca3a218de04466f38f6497f18a2" inherit pypi python_flit_core ptest-python-pytest -- 2.35.6
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243780): https://lists.openembedded.org/g/openembedded-core/message/243780 Mute This Topic: https://lists.openembedded.org/mt/120833595/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
