From: Wang Mingyu <[email protected]>

Changelog:
 CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation

Signed-off-by: Wang Mingyu <[email protected]>
---
 .../{python3-filelock_3.20.0.bb => python3-filelock_3.20.1.bb}  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-filelock_3.20.0.bb => 
python3-filelock_3.20.1.bb} (87%)

diff --git a/meta-python/recipes-devtools/python/python3-filelock_3.20.0.bb 
b/meta-python/recipes-devtools/python/python3-filelock_3.20.1.bb
similarity index 87%
rename from meta-python/recipes-devtools/python/python3-filelock_3.20.0.bb
rename to meta-python/recipes-devtools/python/python3-filelock_3.20.1.bb
index 4ce89a853e..a499b79c07 100644
--- a/meta-python/recipes-devtools/python/python3-filelock_3.20.0.bb
+++ b/meta-python/recipes-devtools/python/python3-filelock_3.20.1.bb
@@ -5,7 +5,7 @@ HOMEPAGE = "https://py-filelock.readthedocs.io/";
 LICENSE = "Unlicense"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=911690f51af322440237a253d695d19f"
 
-SRC_URI[sha256sum] = 
"711e943b4ec6be42e1d4e6690b48dc175c822967466bb31c0c293f34334c13f4"
+SRC_URI[sha256sum] = 
"b8360948b351b80f420878d8516519a2204b07aefcdcfd24912a5d33127f188c"
 
 BBCLASSEXTEND = "native nativesdk"
 
-- 
2.43.0

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#122865): 
https://lists.openembedded.org/g/openembedded-devel/message/122865
Mute This Topic: https://lists.openembedded.org/mt/116927030/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to