From 1bb4a955fa6acceba3b6aab2e7f5ee2e3bbabc9e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 22 Jun 2025 12:03:33 +0200 Subject: [PATCH] package/python3: security bump to 3.13.5 3.13.4 fixes CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE 2025-4435 and CVE 2025-4517 but introduced some regressions fixed in 3.13.5. Release notes: https://www.python.org/downloads/release/python-3135/ https://www.python.org/downloads/release/python-3134/ Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/python3/python3.hash | 6 +++--- package/python3/python3.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python3/python3.hash b/package/python3/python3.hash index b13f5cc742..2ca8ad4930 100644 --- a/package/python3/python3.hash +++ b/package/python3/python3.hash @@ -1,5 +1,5 @@ -# From https://www.python.org/downloads/release/python-3133/ -md5 8bb5f0b8c9d9d7b87d7d98510e8d58e5 Python-3.13.3.tar.xz +# From https://www.python.org/downloads/release/python-3135/ +md5 dbaa8833aa736eddbb18a6a6ae0c10fa Python-3.13.5.tar.xz # Locally computed -sha256 40f868bcbdeb8149a3149580bb9bfd407b3321cd48f0be631af955ac92c0e041 Python-3.13.3.tar.xz +sha256 93e583f243454e6e9e4588ca2c2662206ad961659863277afcdb96801647d640 Python-3.13.5.tar.xz sha256 78b12c3a81360b357002334f0e70ea0e92eebf7a9b358805c03c48484945f3bb LICENSE diff --git a/package/python3/python3.mk b/package/python3/python3.mk index 3e6273a773..ec210ccac8 100644 --- a/package/python3/python3.mk +++ b/package/python3/python3.mk @@ -5,7 +5,7 @@ ################################################################################ PYTHON3_VERSION_MAJOR = 3.13 -PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).3 +PYTHON3_VERSION = $(PYTHON3_VERSION_MAJOR).5 PYTHON3_SOURCE = Python-$(PYTHON3_VERSION).tar.xz PYTHON3_SITE = https://python.org/ftp/python/$(PYTHON3_VERSION) PYTHON3_LICENSE = Python-2.0, others