[{"id":3685287,"web_url":"http://patchwork.ozlabs.org/comment/3685287/","msgid":"<1f627256623f8f08cb2abe0b384b6db6@free.fr>","list_archive_url":null,"date":"2026-05-02T12:05:14","subject":"Re: [Buildroot] [PATCH 71/75] package/python-wheel: security bump\n version to 0.47.0","submitter":{"id":80537,"url":"http://patchwork.ozlabs.org/api/people/80537/","name":"Julien Olivain","email":"ju.o@free.fr"},"content":"Hi Bernd, All,\n\nOn 01/05/2026 14:30, Bernd Kuhls wrote:\n> https://github.com/pypa/wheel/blob/0.47.0/docs/news.rst\n\nI can't find any reference of a security fix in this news,\nwhile this commit title mention \"security\".\n\nCould you provide more details (or confirm it is not needed), please?\nNo need to send a v2, I can fix while applying.\n\n> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>\n\nBest regards,\n\nJulien.","headers":{"Return-Path":"<buildroot-bounces@buildroot.org>","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=rpAzqXXW;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g767845mtz1y04\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Sat, 02 May 2026 22:05:40 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 428FD82F8A;\n\tSat,  2 May 2026 12:05:38 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id kr4Pn7c7XbFi; Sat,  2 May 2026 12:05:36 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 4958D82F20;\n\tSat,  2 May 2026 12:05:36 +0000 (UTC)","from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n by lists1.osuosl.org (Postfix) with ESMTP id 1F93B24E\n for <buildroot@buildroot.org>; Sat,  2 May 2026 12:05:35 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 05A1082ED1\n for <buildroot@buildroot.org>; Sat,  2 May 2026 12:05:35 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id UkkqHTZbNU7n for <buildroot@buildroot.org>;\n Sat,  2 May 2026 12:05:34 +0000 (UTC)","from smtp1-g21.free.fr (smtp1-g21.free.fr [212.27.42.1])\n by smtp1.osuosl.org (Postfix) with ESMTPS id F008782E9D\n for <buildroot@buildroot.org>; Sat,  2 May 2026 12:05:33 +0000 (UTC)","from webmail.free.fr (unknown [172.20.246.3])\n (Authenticated sender: ju.o@free.fr)\n by smtp1-g21.free.fr (Postfix) with ESMTPA id 76850B0053D;\n Sat,  2 May 2026 14:05:14 +0200 (CEST)","from 2a01:e0a:1065:2100:52d9:65fe:2df3:c492\n via 2a01:e0a:1065:2100:52d9:65fe:2df3:c492 by webmail.free.fr\n with HTTP (HTTP/1.0 POST); Sat, 02 May 2026 14:05:14 +0200"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org 4958D82F20","OpenDKIM Filter v2.11.0 smtp1.osuosl.org F008782E9D"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1777723536;\n\tbh=P2/Ozl5EPTz+jbJ03fqt/ld6cgFvVpDviuiW/KHuTTc=;\n\th=Date:To:Cc:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=rpAzqXXW/ZIEMIz+Pd5NX8Bd2qGF9X2WwN8vu38YkYsL05f64QLNLR67yA0g0qd3y\n\t s7S0u948YreqvVOkoTwyfIzeC/OpX0IpKjZe34/GpSPFN9kG0KcnBJQWplTPpoetKZ\n\t lfDj7kF59l2MfTLA30Mu3xVZatLtUKdHdlhig4rmy43pSSStg+QaI3eePYBJ9GQLBu\n\t iQEivTgQzYdvkuf4TCwURNT6YAYy86SMGIG/g3xxNTXNRY2j3bvcif3wBhnPA7BGii\n\t 2f1vV9rnuVpGktJIr7/HZUfNglk2U6tdx4NMXaXaD9LUpZ8hkTlAOdoErt3BzmHoEX\n\t HJYn7pZaA4VEg==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=212.27.42.1;\n helo=smtp1-g21.free.fr; envelope-from=ju.o@free.fr; receiver=<UNKNOWN>","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp1.osuosl.org F008782E9D","MIME-Version":"1.0","Date":"Sat, 02 May 2026 14:05:14 +0200","To":"Bernd Kuhls <bernd@kuhls.net>","Cc":"buildroot@buildroot.org, Joseph Kogut <joseph.kogut@gmail.com>,\n Christophe Vu-Brugier <cvubrugier@fastmail.fm>, =?utf-8?b?UmFwaGHDq2wgTcOp?=\n\t=?utf-8?b?bG90dGU=?= <raphael.melotte@mind.be>, =?utf-8?q?Fl=C3=A1vio_Tapaj?=\n\t=?utf-8?q?=C3=B3s?= <flavio.tapajos@newtesc.com.br>, =?utf-8?q?Martin_Hunde?=\n\t=?utf-8?q?b=C3=B8ll?= <martin@geanix.com>,\n Grzegorz Blach <grzegorz@blach.pl>,\n Marcin Niestroj <m.niestroj@grinn-global.com>,\n Guillaume William Brs <guillaume.bressaix@gmail.com>,\n James Hilliard <james.hilliard1@gmail.com>,\n Ludovic Desroches <ludovic.desroches@microchip.com>,\n Jagan Teki <jagan@amarulasolutions.com>,\n Thomas Petazzoni <thomas.petazzoni@bootlin.com>,\n Falco Hyfing <hyfinglists@gmail.com>, Mauro Condarelli <mc5686@mclink.it>,\n Fiona Klute <fiona.klute@gmx.de>","In-Reply-To":"<20260501123100.1918951-71-bernd@kuhls.net>","References":"<20260501123100.1918951-1-bernd@kuhls.net>\n <20260501123100.1918951-71-bernd@kuhls.net>","User-Agent":"Webmail Free/1.6.14","Message-ID":"<1f627256623f8f08cb2abe0b384b6db6@free.fr>","X-Sender":"ju.o@free.fr","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple;\n d=free.fr; s=smtp-20201208; t=1777723532;\n bh=DXxv6LUGfwXSldjucwrlJKjewLbdGBL47tOFGBJbALY=;\n h=Date:From:To:Cc:Subject:In-Reply-To:References:From;\n b=Cn0a/jUCEoybmVac98Whtuv+siMaeeHZbKAXhIdyHT0QosErDknaVGjzIGozJSEmZ\n k6Bj2CrpQyS+7x0c212Hc2x8kfiu56AGAM93NiWxZ7KNJq9XJgJ3qNhijzMlSfqNi5\n yUHVDgRLx6C0W77+XdKw2fHx4z+tOPEGroma0fCZ/d8Xb9syIb7fbGym1jnj321Ken\n p0EwbFIbCi4q197LQlwpgxzH3RZeLWPBhcqtCvB89RySGMgAv0EMA69ZAGMaZneWgX\n IFSGEAy/WtQjh9HC8BjoqrmvPnf/xR9PnuOF97LWyhTl9pZWm0eIEC0Wi6BVnVwsYw\n /J/ly4V6cpVQg==","X-Mailman-Original-Authentication-Results":["smtp1.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=free.fr","smtp1.osuosl.org;\n dkim=pass (2048-bit key) header.d=free.fr header.i=@free.fr\n header.a=rsa-sha256 header.s=smtp-20201208 header.b=Cn0a/jUC"],"Subject":"Re: [Buildroot] [PATCH 71/75] package/python-wheel: security bump\n version to 0.47.0","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot <buildroot.buildroot.org>","List-Unsubscribe":"<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>","List-Archive":"<http://lists.buildroot.org/pipermail/buildroot/>","List-Post":"<mailto:buildroot@buildroot.org>","List-Help":"<mailto:buildroot-request@buildroot.org?subject=help>","List-Subscribe":"<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>","From":"Julien Olivain via buildroot <buildroot@buildroot.org>","Reply-To":"Julien Olivain <ju.o@free.fr>","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" <buildroot-bounces@buildroot.org>"}},{"id":3685289,"web_url":"http://patchwork.ozlabs.org/comment/3685289/","msgid":"<pan$3a545$3dc87416$8e38e4c9$8580d900@ID-313208.user.individual.net>","list_archive_url":null,"date":"2026-05-02T12:29:17","subject":"Re: [Buildroot] [PATCH 71/75] package/python-wheel: security bump\n version to 0.47.0","submitter":{"id":86624,"url":"http://patchwork.ozlabs.org/api/people/86624/","name":"Bernd Kuhls","email":"bernd@kuhls.net"},"content":"Am Sat, 02 May 2026 14:05:14 +0200 schrieb Julien Olivain via buildroot:\n\n> Could you provide more details (or confirm it is not needed), please?\n> No need to send a v2, I can fix while applying.\n\nHi Julien,\n\nyou can remove \"security\" from the subject, thanks!\nThis is a copy-and-paste error from the previous python-wheel bump, sorry.\n\nRegards, Bernd","headers":{"Return-Path":"<buildroot-bounces@buildroot.org>","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=Hk5xwmlz;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g76gc1wHHz1yGq\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Sat, 02 May 2026 22:30:18 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 08FAE81404;\n\tSat,  2 May 2026 12:30:15 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id KYe_dAFVLVQw; Sat,  2 May 2026 12:30:12 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id C090B81370;\n\tSat,  2 May 2026 12:30:12 +0000 (UTC)","from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133])\n by lists1.osuosl.org (Postfix) with ESMTP id 77C83127\n for <buildroot@buildroot.org>; Sat,  2 May 2026 12:30:11 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id 5D77140833\n for <buildroot@buildroot.org>; Sat,  2 May 2026 12:30:11 +0000 (UTC)","from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id XXiK8ayVETNd for <buildroot@buildroot.org>;\n Sat,  2 May 2026 12:30:10 +0000 (UTC)","from ciao.gmane.io (ciao.gmane.io [116.202.254.214])\n by smtp2.osuosl.org (Postfix) with ESMTPS id 1099240832\n for <buildroot@uclibc.org>; Sat,  2 May 2026 12:30:09 +0000 (UTC)","from list by ciao.gmane.io with local (Exim 4.92)\n (envelope-from <gclub-buildroot@m.gmane-mx.org>) id 1wJ9Tz-0009Rr-A9\n for buildroot@uclibc.org; Sat, 02 May 2026 14:30:07 +0200"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org C090B81370","OpenDKIM Filter v2.11.0 smtp2.osuosl.org 1099240832"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1777725012;\n\tbh=Qe9a6yVtX7WDhR/2EfDhQXP6o1JEfP4/t0GpjowOd/A=;\n\th=To:From:Date:References:Subject:List-Id:List-Unsubscribe:\n\t List-Archive:List-Post:List-Help:List-Subscribe:From;\n\tb=Hk5xwmlz5Stu4Maf5DBqitu8cZOu11493DKkfM44inH1iTiz3t83UI/WQ0YwebmmI\n\t INm3fUl8I5og49/tQc3zJieMXkNZWWGtTcYDmcc6fREZMbB7pE26sEtndV4/vNdNZX\n\t Cmtg1JpTgBa+TZVeGzfuJ4zO/5ig3g4L0lWhRtTpHE0n8aAjcbiY6Qg04aGRhu0Xnh\n\t 6nk9PiM4RDCF7zAt4xWVX7KG5FtlSxCmCb+7YgM6UKp3caMK2Oni+E762ETjZCOMFH\n\t mElTB8sbzhQ8Az5h132k173kPDHfp9ylQcB1eTN1mhakkNbtfWud7hwtNJSrjusisT\n\t k6kPRdFwOF8fg==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=116.202.254.214;\n helo=ciao.gmane.io; envelope-from=gclub-buildroot@m.gmane-mx.org;\n receiver=<UNKNOWN>","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp2.osuosl.org 1099240832","X-Injected-Via-Gmane":"http://gmane.org/","To":"buildroot@uclibc.org","From":"Bernd Kuhls <bernd@kuhls.net>","Date":"Sat, 02 May 2026 14:29:17 +0200","Message-ID":"\n <pan$3a545$3dc87416$8e38e4c9$8580d900@ID-313208.user.individual.net>","References":"<20260501123100.1918951-1-bernd@kuhls.net>\n <20260501123100.1918951-71-bernd@kuhls.net>\n <1f627256623f8f08cb2abe0b384b6db6__14265.3861011908$1777723557$gmane$org@free.fr>","Mime-Version":"1.0","User-Agent":"Pan/0.162 (Pokrosvk)","X-Mailman-Original-Authentication-Results":"smtp2.osuosl.org;\n dmarc=fail (p=none dis=none)\n header.from=kuhls.net","Subject":"Re: [Buildroot] [PATCH 71/75] package/python-wheel: security bump\n version to 0.47.0","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot <buildroot.buildroot.org>","List-Unsubscribe":"<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>","List-Archive":"<http://lists.buildroot.org/pipermail/buildroot/>","List-Post":"<mailto:buildroot@buildroot.org>","List-Help":"<mailto:buildroot-request@buildroot.org?subject=help>","List-Subscribe":"<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" <buildroot-bounces@buildroot.org>"}}]