Re: [oe] [meta-python][wrynose][PATCH 1/2] python3-pyjwt: upgrade 2.12.1 -> 2.13.0

Anuj Mittal <[email protected]>
Newsgroups org.openembedded.lists.openembedded-devel
Message-ID <CA+s=J=zwfo6qOY97OH64=284L8PenJD9TWswvM7jOo3wQk9HoA@mail.gmail.com>
On Wed, Aug 5, 2026 at 1:02 PM Hetvi Thakar -X (hthakar - E INFOCHIPS
PRIVATE LIMITED at Cisco) via lists.openembedded.org
<[email protected]> wrote:
>
> From: Wang Mingyu <[email protected]>
>
> This upgrade fixes CVE-2026-48522, CVE-2026-48524,
> CVE-2026-48525 and CVE-2026-48526.
>
> Signed-off-by: Wang Mingyu <[email protected]>
> Signed-off-by: Khem Raj <[email protected]>
> (cherry picked from commit 0a60a9b758eedcf803b426a3f9327a20a5a7db53)
> Signed-off-by: Hetvi Thakar <[email protected]>
> ---
>  .../python/{python3-pyjwt_2.12.1.bb => python3-pyjwt_2.13.0.bb} | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta-python/recipes-devtools/python/{python3-pyjwt_2.12.1.bb => python3-pyjwt_2.13.0.bb} (85%)

This version includes changes that may change behavior changes for
environments. Would it be possible to backport the CVE fixes instead?

>
> diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb
> similarity index 85%
> rename from meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb
> rename to meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb
> index eb445f9c91..140d3bf3e4 100644
> --- a/meta-python/recipes-devtools/python/python3-pyjwt_2.12.1.bb
> +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb
> @@ -5,7 +5,7 @@ HOMEPAGE = "https://github.com/jpadilla/pyjwt"
>  LICENSE = "MIT"
>  LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551"
>
> -SRC_URI[sha256sum] = "c74a7a2adf861c04d002db713dd85f84beb242228e671280bf709d765b03672b"
> +SRC_URI[sha256sum] = "41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423"
>
>  PYPI_PACKAGE = "pyjwt"
>  CVE_PRODUCT = "pyjwt"
> --
> 2.35.6
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#128789): https://lists.openembedded.org/g/openembedded-devel/message/128789
> Mute This Topic: https://lists.openembedded.org/mt/120606157/3616702
> Group Owner: [email protected]
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.