{"id":2225859,"url":"http://patchwork.ozlabs.org/api/patches/2225859/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260421172625.735873-2-ju.o@free.fr/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260421172625.735873-2-ju.o@free.fr>","list_archive_url":null,"date":"2026-04-21T17:26:23","name":"[2/4] package/python-magic-wormhole: security bump to version 0.23.0","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"ed4dd7a7db3871196663e0ec0039e8c986425071","submitter":{"id":80537,"url":"http://patchwork.ozlabs.org/api/people/80537/?format=json","name":"Julien Olivain","email":"ju.o@free.fr"},"delegate":{"id":161283,"url":"http://patchwork.ozlabs.org/api/users/161283/?format=json","username":"Bubu","first_name":"Marcus","last_name":"Hoffmann","email":"bubu@bubu1.eu"},"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260421172625.735873-2-ju.o@free.fr/mbox/","series":[{"id":500857,"url":"http://patchwork.ozlabs.org/api/series/500857/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=500857","date":"2026-04-21T17:26:23","name":"[1/4] package/python-magic-wormhole: add CPE ID","version":1,"mbox":"http://patchwork.ozlabs.org/series/500857/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2225859/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2225859/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=Kk/9Z35G;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0Tmx5f6wz1yCv\n\tfor ;\n Wed, 22 Apr 2026 03:26:56 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 4EB0C83E2D;\n\tTue, 21 Apr 2026 17:26:54 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id xLSDrW3J2PzC; Tue, 21 Apr 2026 17:26:53 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 5925183E2F;\n\tTue, 21 Apr 2026 17:26:53 +0000 (UTC)","from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n by lists1.osuosl.org (Postfix) with ESMTP id A756924D\n for ; Tue, 21 Apr 2026 17:26:51 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 8D4D783E2F\n for ; Tue, 21 Apr 2026 17:26:51 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id w7Q959NhEaFi for ;\n Tue, 21 Apr 2026 17:26:50 +0000 (UTC)","from smtp5-g21.free.fr (smtp5-g21.free.fr [212.27.42.5])\n by smtp1.osuosl.org (Postfix) with ESMTPS id 8637B83E2D\n for ; Tue, 21 Apr 2026 17:26:50 +0000 (UTC)","from home.juju.sh (unknown\n [IPv6:2a01:e0a:1065:2100:52d9:65fe:2df3:c492])\n (Authenticated sender: ju.o@free.fr)\n by smtp5-g21.free.fr (Postfix) with ESMTPSA id AAC2A60141;\n Tue, 21 Apr 2026 19:26:43 +0200 (CEST)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org 5925183E2F","OpenDKIM Filter v2.11.0 smtp1.osuosl.org 8637B83E2D"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776792413;\n\tbh=RHQ0QohhWWpGamFaoN582hHEioD0UdqLghh/KCUIn4w=;\n\th=To:Date:In-Reply-To:References:Subject:List-Id:List-Unsubscribe:\n\t List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:\n\t From;\n\tb=Kk/9Z35GCYQh3PAvOv8J+s+Y9r+0on9iyevD6hSb5wnDkz3kHEcReLU160Z3kiuDp\n\t gNfhCC4p8OIyNOUAusp/rQ5nOOpu9r7SYnlNBQNS51c3CaaJT/nBCeaKwfROVytmnY\n\t 96NcLQxBxhFEJ8ctGxrf0euPBQLLp/WY9PlKC6BgqLwNhJBe1LrhEMuu70XIfutg+G\n\t gLNp2B4wb3S6TlQfLxjL8YnVnXgQplbDV6TpV6m7Z0nhMJtLuUE2keVTlcxNF+cpK1\n\t Q2tQsRz3ofqAW1kRnfZDAEr5AL0zkmSeS6C4eoBtO3Z2uMptVDibt5xqsujJa+oco6\n\t 8tGNEPFzXK0YQ==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=212.27.42.5;\n helo=smtp5-g21.free.fr; envelope-from=ju.o@free.fr; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp1.osuosl.org 8637B83E2D","To":"buildroot@buildroot.org","Date":"Tue, 21 Apr 2026 19:26:23 +0200","Message-ID":"<20260421172625.735873-2-ju.o@free.fr>","X-Mailer":"git-send-email 2.53.0","In-Reply-To":"<20260421172625.735873-1-ju.o@free.fr>","References":"<20260421172625.735873-1-ju.o@free.fr>","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple;\n d=free.fr; s=smtp-20201208; t=1776792408;\n bh=CIave370MsqN36vYY4BmdpWS8xsPsthf/ij+Pccg3Ug=;\n h=From:To:Cc:Subject:Date:In-Reply-To:References:From;\n b=M8JMUmpseiS6aqddL6CaziK6nE1JrEzc16mWAqrqi9vY943s/BBp/U5V1WOBaR9Y6\n 5Z0RXI+JIFF65fEE5RN/tQR9qptNxyrLZTgOjl9+Uz/VSKHT0r1DH4wL/Vjn6MJXoO\n k5dC1HNsBTAs/gQa7wfJhIE10RNYgrST5kY0fNuBkzgw7wIwTnzYV2B9ScjLOJtWlq\n afMe8rMFVlOBfKGAzVwaHytFGVV1Gq/V2uj2HwKCbbQMiikC4N4HwiFvaCdvd7EiXQ\n +3Wi5QlK+VvVatQ2YQ+ZGVii3JpnE+oBlhw4+xUkff/Vxo1M3udRd1eQrzDfMlCN6R\n gbCw81+Wvtj7w==","X-Mailman-Original-Authentication-Results":["smtp1.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=free.fr","smtp1.osuosl.org;\n dkim=pass (2048-bit key) header.d=free.fr header.i=@free.fr\n header.a=rsa-sha256 header.s=smtp-20201208 header.b=M8JMUmps"],"Subject":"[Buildroot] [PATCH 2/4] package/python-magic-wormhole: security\n bump to version 0.23.0","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Julien Olivain via buildroot ","Reply-To":"Julien Olivain ","Cc":"James Hilliard , Julien Olivain ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"See NEWS:\nhttps://github.com/magic-wormhole/magic-wormhole/blob/0.23.0/NEWS.md\n\nThis commit also updates _SITE to use a stable URL which will redirect\nto the package archive, to reduce future maintenance.\n\nFixes:\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-32116\n\nSigned-off-by: Julien Olivain \n---\nPatch series tested in:\nhttps://gitlab.com/jolivain/buildroot/-/jobs/14023074896\n---\n package/python-magic-wormhole/python-magic-wormhole.hash | 4 ++--\n package/python-magic-wormhole/python-magic-wormhole.mk | 4 ++--\n 2 files changed, 4 insertions(+), 4 deletions(-)","diff":"diff --git a/package/python-magic-wormhole/python-magic-wormhole.hash b/package/python-magic-wormhole/python-magic-wormhole.hash\nindex b0f32e2d13..2f03594cc1 100644\n--- a/package/python-magic-wormhole/python-magic-wormhole.hash\n+++ b/package/python-magic-wormhole/python-magic-wormhole.hash\n@@ -1,5 +1,5 @@\n # md5, sha256 from https://pypi.org/pypi/magic-wormhole/json\n-md5 e57bac643bbc691e94919be496813a4c magic_wormhole-0.22.0.tar.gz\n-sha256 52a3ae2f0c56d0d4cd52188e50f10d2fe14bfd46e287dd50b72e7f7e851434ac magic_wormhole-0.22.0.tar.gz\n+md5 23f71fc6d6f78b93d419cee6d4af4d94 magic_wormhole-0.23.0.tar.gz\n+sha256 4cd8f48a5c47f70578be7063f892988177681ab66845f4d6ad2d5eb03ce82acf magic_wormhole-0.23.0.tar.gz\n # Locally computed sha256 checksums\n sha256 4a9cc2415c52cef591b6822eee68fed36d7e6d80284b09638cff61d762d99060 LICENSE\ndiff --git a/package/python-magic-wormhole/python-magic-wormhole.mk b/package/python-magic-wormhole/python-magic-wormhole.mk\nindex 7b74113df1..9f3b4dfe1c 100644\n--- a/package/python-magic-wormhole/python-magic-wormhole.mk\n+++ b/package/python-magic-wormhole/python-magic-wormhole.mk\n@@ -4,9 +4,9 @@\n #\n ################################################################################\n \n-PYTHON_MAGIC_WORMHOLE_VERSION = 0.22.0\n+PYTHON_MAGIC_WORMHOLE_VERSION = 0.23.0\n PYTHON_MAGIC_WORMHOLE_SOURCE = magic_wormhole-$(PYTHON_MAGIC_WORMHOLE_VERSION).tar.gz\n-PYTHON_MAGIC_WORMHOLE_SITE = https://files.pythonhosted.org/packages/65/34/08813891da57999cf953e9c553193c900ff363c4cdfdd48a74f65536a883\n+PYTHON_MAGIC_WORMHOLE_SITE = https://files.pythonhosted.org/packages/source/m/magic_wormhole\n PYTHON_MAGIC_WORMHOLE_SETUP_TYPE = setuptools\n PYTHON_MAGIC_WORMHOLE_LICENSE = MIT\n PYTHON_MAGIC_WORMHOLE_LICENSE_FILES = LICENSE\n","prefixes":["2/4"]}