Github messages for voidlinux
 help / color / mirror / Atom feed
* [PR PATCH] python3-rsa: update to 4.6
@ 2020-10-28 22:10 aurieh
  2020-10-30  1:35 ` [PR PATCH] [Closed]: " ericonr
  0 siblings, 1 reply; 2+ messages in thread
From: aurieh @ 2020-10-28 22:10 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 508 bytes --]

There is a new pull request by aurieh against master on the void-packages repository

https://github.com/aurieh/void-packages update-python3-rsa
https://github.com/void-linux/void-packages/pull/25953

python3-rsa: update to 4.6
Resolves CVE-2020-13757 and drops Python 2.7 support, which is no big deal, since the only two packages (`python3-google-auth` and `python3-Telethon`) to depend on it both run on Python 3.

A patch file from https://github.com/void-linux/void-packages/pull/25953.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-update-python3-rsa-25953.patch --]
[-- Type: text/x-diff, Size: 1032 bytes --]

From c1fcd89b071dbf1a1e4131ca041b6a4d7fb61e20 Mon Sep 17 00:00:00 2001
From: Auri <me@aurieh.me>
Date: Thu, 29 Oct 2020 00:08:54 +0200
Subject: [PATCH] python3-rsa: update to 4.6

---
 srcpkgs/python3-rsa/template | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/srcpkgs/python3-rsa/template b/srcpkgs/python3-rsa/template
index a4c915dc72b..f6ac2c78194 100644
--- a/srcpkgs/python3-rsa/template
+++ b/srcpkgs/python3-rsa/template
@@ -1,7 +1,7 @@
 # Template file for 'python3-rsa'
 pkgname=python3-rsa
-version=4.0
-revision=4
+version=4.6
+revision=1
 wrksrc="${pkgname#*-}-${version}"
 build_style=python3-module
 hostmakedepends="python3-setuptools"
@@ -11,6 +11,6 @@ maintainer="Peter Bui <pnutzh4x0r@gmail.com>"
 license="Apache-2.0"
 homepage="https://stuvel.eu/rsa"
 distfiles="${PYPI_SITE}/r/rsa/rsa-${version}.tar.gz"
-checksum=1a836406405730121ae9823e19c6e806c62bbad73f890574fff50efa4122c487
+checksum=109ea5a66744dd859bf16fe904b8d8b627adafb9408753161e766a92e7d681fa
 
 conflicts="python-rsa>=0"

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [PR PATCH] [Closed]: python3-rsa: update to 4.6
  2020-10-28 22:10 [PR PATCH] python3-rsa: update to 4.6 aurieh
@ 2020-10-30  1:35 ` ericonr
  0 siblings, 0 replies; 2+ messages in thread
From: ericonr @ 2020-10-30  1:35 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 348 bytes --]

There's a closed pull request on the void-packages repository

python3-rsa: update to 4.6
https://github.com/void-linux/void-packages/pull/25953

Description:
Resolves CVE-2020-13757 and drops Python 2.7 support, which is no big deal, since the only two packages (`python3-google-auth` and `python3-Telethon`) to depend on it both run on Python 3.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2020-10-30  1:35 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-10-28 22:10 [PR PATCH] python3-rsa: update to 4.6 aurieh
2020-10-30  1:35 ` [PR PATCH] [Closed]: " ericonr

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).