mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/python-jinja2: security bump to version 3.1.6

Browse Source 
Fixes the following security issue:

- CVE-2025-27516: Prior to 3.1.6, an oversight in how the Jinja
    sandboxed environment interacts with the |attr filter allows
    an attacker that controls the content of a template to execute
    arbitrary Python code.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-27516
  - 90457bbf33

For more details on the version bump, see the release notes:

https://github.com/pallets/jinja/releases/tag/3.1.6

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Thomas Perale
2025-04-09 19:10:44 +02:00
committed by Julien Olivain
parent 5468334bb0
commit 2d5903769f
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/python-jinja2/python-jinja2.hash
View File

@@ -1,5 +1,5 @@
# md5, sha256 from https://pypi.org/pypi/jinja2/json
md5 083d64f070f6f1b5f75971ae60240785 jinja2-3.1.5.tar.gz
sha256 8fefff8dc3034e27bb80d67c671eb8a9bc424c0ef4c0826edbff304cceff43bb jinja2-3.1.5.tar.gz
md5 66d4c25ff43d1deaf9637ccda523dec8 jinja2-3.1.6.tar.gz
sha256 0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d jinja2-3.1.6.tar.gz
# Locally computed sha256 checksums
sha256 3b49dcee4105eb37bac10faf1be260408fe85d252b8e9df2e0979fc1e094437b LICENSE.txt

4
package/python-jinja2/python-jinja2.mk
View File

@@ -4,9 +4,9 @@
#
################################################################################
PYTHON_JINJA2_VERSION = 3.1.5
PYTHON_JINJA2_VERSION = 3.1.6
PYTHON_JINJA2_SOURCE = jinja2-$(PYTHON_JINJA2_VERSION).tar.gz
PYTHON_JINJA2_SITE = https://files.pythonhosted.org/packages/af/92/b3130cbbf5591acf9ade8708c365f3238046ac7cb8ccba6e81abccb0ccff
PYTHON_JINJA2_SITE = https://files.pythonhosted.org/packages/df/bf/f7da0350254c0ed7c72f3e33cef02e048281fec7ecec5f032d4aac52226b
PYTHON_JINJA2_SETUP_TYPE = flit
PYTHON_JINJA2_LICENSE = BSD-3-Clause
PYTHON_JINJA2_LICENSE_FILES = LICENSE.txt