diff options
| author |   Tim Orling <ticotimo@gmail.com> | 2022-11-01 08:08:57 -0700 |
|---|---|---|
| committer |   Steve Sakoman <steve@sakoman.com> | 2022-11-17 16:38:45 -1000 |
| commit | ce8d8fb1052eb45c0a4a860cb59c53c93430d6bf (patch) | |
| tree | 97af3d3625ebbfd069b97562c60234f1532cbc71 | |
| parent | ff2436215efda27cc380840a4f97910d3263e245 (diff) | |
| download | openembedded-core-contrib-ce8d8fb1052eb45c0a4a860cb59c53c93430d6bf.tar.gz | |
python3-mako: upgrade 1.2.2 -> 1.2.3
Released: Thu Sep 22 2022
* bug
- [bug] [lexer]
* Fixed issue in lexer in the same category as that of #366 where the regexp
used to match an end tag didn’t correctly organize for matching characters
surrounded by whitespace, leading to high memory / interpreter hang if a
closing tag incorrectly had a large amount of unterminated space in it.
Credit to Sebastian Chnelik for locating the issue.
As Mako templates inherently render and directly invoke arbitrary Python
code from the template source, it is never appropriate to create templates
that contain untrusted input.
References: #367
[1] https://docs.makotemplates.org/en/latest/changelog.html#change-1.2.3
[2] https://github.com/sqlalchemy/mako/issues/366
[3] https://github.com/sqlalchemy/mako/issues/367
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 49ad6f031458e1f48f24547dc88e41abc4ec41a6)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-devtools/python/python3-mako_1.2.3.bb (renamed from meta/recipes-devtools/python/python3-mako_1.2.2.bb) | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-devtools/python/python3-mako_1.2.2.bb b/meta/recipes-devtools/python/python3-mako_1.2.3.bb index e3774ee621..12acfee777 100644 --- a/meta/recipes-devtools/python/python3-mako_1.2.2.bb +++ b/meta/recipes-devtools/python/python3-mako_1.2.3.bb @@ -8,7 +8,7 @@ PYPI_PACKAGE = "Mako" inherit pypi python_setuptools_build_meta -SRC_URI[sha256sum] = "3724869b363ba630a272a5f89f68c070352137b8fd1757650017b7e06fda163f" +SRC_URI[sha256sum] = "7fde96466fcfeedb0eed94f187f20b23d85e4cb41444be0e542e2c8c65c396cd" RDEPENDS:${PN} = "${PYTHON_PN}-html \ ${PYTHON_PN}-markupsafe \ |