[hardknott][meta-python][PATCH 1/1] python3-urllib3: Upgrade 1.26.4 -> 1.26.5

[hardknott][meta-python][PATCH 1/1] python3-urllib3: Upgrade 1.26.4 -> 1.26.5

[Joe Slater]

From: Leon Anavi <leon.anavi@konsulko.com>

Upgrade to release 1.26.5:

- Fixed deprecation warnings emitted in Python 3.10.
- Updated vendored six library to 1.16.0.
- Improved performance of URL parser when splitting the authority
  component.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>

Fixes CVE 2021-33503.

(cherry picked from commit bb39c29a46e44fcc082aed0ce8772f4267a41d2d)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
---
 .../{python3-urllib3_1.26.4.bb => python3-urllib3_1.26.5.bb}    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-urllib3_1.26.4.bb => python3-urllib3_1.26.5.bb} (86%)

diff --git a/meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb b/meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
similarity index 86%
rename from meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
rename to meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
index 0a31fb1e2..f2fb33c6d 100644
--- a/meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
+++ b/meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/shazow/urllib3"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=c2823cb995439c984fd62a973d79815c"
 
-SRC_URI[sha256sum] = "e7b021f7241115872f92f43c6508082facffbd1c048e3c6e2bb9c2a157e28937"
+SRC_URI[sha256sum] = "a7acd0977125325f516bda9735fa7142b909a8d01e8b2e4c8108d0984e6e0098"
 
 inherit pypi setuptools3
 
-- 
2.25.1

Re: [hardknott][meta-python][PATCH 1/1] python3-urllib3: Upgrade 1.26.4 -> 1.26.5

[Randy MacLeod]

On 2021-07-20 2:53 p.m., Joe Slater wrote:
> From: Leon Anavi <leon.anavi@konsulko.com>
> 
> Upgrade to release 1.26.5:

Armin,

Did you miss this one, I don't see it in:
 
https://git.openembedded.org/meta-openembedded-contrib/log/?h=stable/hardknott-nut

Thanks,

../Randy
> 
> - Fixed deprecation warnings emitted in Python 3.10.
> - Updated vendored six library to 1.16.0.
> - Improved performance of URL parser when splitting the authority
>    component.
> 
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
> Signed-off-by: Khem Raj <raj.khem@gmail.com>
> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> 
> Fixes CVE 2021-33503.
> 
> (cherry picked from commit bb39c29a46e44fcc082aed0ce8772f4267a41d2d)
> 
> Signed-off-by: Joe Slater <joe.slater@windriver.com>
> ---
>   .../{python3-urllib3_1.26.4.bb => python3-urllib3_1.26.5.bb}    | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
>   rename meta-python/recipes-devtools/python/{python3-urllib3_1.26.4.bb => python3-urllib3_1.26.5.bb} (86%)
> 
> diff --git a/meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb b/meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
> similarity index 86%
> rename from meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
> rename to meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
> index 0a31fb1e2..f2fb33c6d 100644
> --- a/meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
> +++ b/meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
> @@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/shazow/urllib3"
>   LICENSE = "MIT"
>   LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=c2823cb995439c984fd62a973d79815c"
>   
> -SRC_URI[sha256sum] = "e7b021f7241115872f92f43c6508082facffbd1c048e3c6e2bb9c2a157e28937"
> +SRC_URI[sha256sum] = "a7acd0977125325f516bda9735fa7142b909a8d01e8b2e4c8108d0984e6e0098"
>   
>   inherit pypi setuptools3
>   
> 


-- 
# Randy MacLeod
# Wind River Linux

Re: [hardknott][meta-python][PATCH 1/1] python3-urllib3: Upgrade 1.26.4 -> 1.26.5

[Armin Kuster]

On 7/30/21 8:36 AM, Randy MacLeod wrote:
> On 2021-07-20 2:53 p.m., Joe Slater wrote:
>> From: Leon Anavi <leon.anavi@konsulko.com>
>>
>> Upgrade to release 1.26.5:
>
> Armin,
>
> Did you miss this one, I don't see it in:
Most likely got confused with the other pkg update that had abi
implications. Thanks for the reminder.

-armin
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=stable/hardknott-nut
>
>
> Thanks,
>
> ../Randy
>>
>> - Fixed deprecation warnings emitted in Python 3.10.
>> - Updated vendored six library to 1.16.0.
>> - Improved performance of URL parser when splitting the authority
>>    component.
>>
>> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
>> Signed-off-by: Khem Raj <raj.khem@gmail.com>
>> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
>>
>> Fixes CVE 2021-33503.
>>
>> (cherry picked from commit bb39c29a46e44fcc082aed0ce8772f4267a41d2d)
>>
>> Signed-off-by: Joe Slater <joe.slater@windriver.com>
>> ---
>>   .../{python3-urllib3_1.26.4.bb => python3-urllib3_1.26.5.bb}    | 2 +-
>>   1 file changed, 1 insertion(+), 1 deletion(-)
>>   rename
>> meta-python/recipes-devtools/python/{python3-urllib3_1.26.4.bb =>
>> python3-urllib3_1.26.5.bb} (86%)
>>
>> diff --git
>> a/meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
>> b/meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
>> similarity index 86%
>> rename from
>> meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
>> rename to meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
>> index 0a31fb1e2..f2fb33c6d 100644
>> --- a/meta-python/recipes-devtools/python/python3-urllib3_1.26.4.bb
>> +++ b/meta-python/recipes-devtools/python/python3-urllib3_1.26.5.bb
>> @@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/shazow/urllib3"
>>   LICENSE = "MIT"
>>   LIC_FILES_CHKSUM =
>> "file://LICENSE.txt;md5=c2823cb995439c984fd62a973d79815c"
>>   -SRC_URI[sha256sum] =
>> "e7b021f7241115872f92f43c6508082facffbd1c048e3c6e2bb9c2a157e28937"
>> +SRC_URI[sha256sum] =
>> "a7acd0977125325f516bda9735fa7142b909a8d01e8b2e4c8108d0984e6e0098"
>>     inherit pypi setuptools3
>>  
>
>