package/python-dnspython: security bump to version 2.9.1
PATCH 1/1 package/python-dnspython: security bump to version 2.9.1
Fix CVE-2026-114605: a crafted DNS message can cause excessive CPU use while decompressing DNS names.
https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m
Switch to the uv_build backend.
Signed-off-by James Hilliard <[email protected]>
--- package/python-dnspython/python-dnspython.hash | 4 ++-- package/python-dnspython/python-dnspython.mk | 8 +++++--- 2 files changed, 7 insertions(+), 5 deletions(-)
package/python-dnspython/python-dnspython.hash +2 -2
@@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/dnspython/json -md5 5f2ceb19b1c269f9e1ccef8bf2a1e8c5 dnspython-2.8.0.tar.gz -sha256 181d3c6996452cb1189c4046c61599b84a5a86e099562ffde77d26984ff26d0f dnspython-2.8.0.tar.gz +md5 264d7e3c65df17a3a23c52b64fae6c76 dnspython-2.9.1.tar.gz +sha256 9a6d30e55f8dc63e6052597666112bff0586b95a2474a9deda03afbbf820d37a dnspython-2.9.1.tar.gz # Locally computed sha256 checksums sha256 c3ea3ff5654b329c19d3bc5f7481af623c3dded4a6145585499f843ad3d741cd LICENSE
package/python-dnspython/python-dnspython.mk +5 -3
@@ -4,12 +4,14 @@ # ################################################################################ -PYTHON_DNSPYTHON_VERSION = 2.8.0 +PYTHON_DNSPYTHON_VERSION = 2.9.1 PYTHON_DNSPYTHON_SOURCE = dnspython-$(PYTHON_DNSPYTHON_VERSION).tar.gz -PYTHON_DNSPYTHON_SITE = https://files.pythonhosted.org/packages/8c/8b/57666417c0f90f08bcafa776861060426765fdb422eb10212086fb811d26 +PYTHON_DNSPYTHON_SITE = https://files.pythonhosted.org/packages/91/21/7fcd6780f61e9756aafaea760560509bb4111375daa2e23c1be7a89f33f1 PYTHON_DNSPYTHON_LICENSE = ISC PYTHON_DNSPYTHON_LICENSE_FILES = LICENSE -PYTHON_DNSPYTHON_SETUP_TYPE = hatch +PYTHON_DNSPYTHON_SETUP_TYPE = pep517 +PYTHON_DNSPYTHON_DEPENDENCIES = host-python-uv-build +HOST_PYTHON_DNSPYTHON_DEPENDENCIES = host-python-uv-build $(eval $(python-package)) $(eval $(host-python-package))
Signature · 6 lines
2.53.0 _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot
Quoted 8 lines · James Hilliard
Fix CVE-2026-114605: a crafted DNS message can cause excessive CPU use while decompressing DNS names.
https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m
Switch to the
uv_buildbackend.Signed-off-by James Hilliard <[email protected]>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot