7fc6421be3
Fixes the following security issues:
- CVE-2025-47278: In Flask 3.1.0, the way fallback key configuration was
handled resulted in the last fallback key being used for signing,
rather than the current signing key.
For more information, see:
- https://nvd.nist.gov/vuln/detail/CVE-2025-47278
- 73d6504063
For more details on the version bump, see the release notes:
- https://github.com/pallets/flask/releases/tag/3.1.1
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 45439ae262)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
17 lines
630 B
Makefile
17 lines
630 B
Makefile
################################################################################
|
|
#
|
|
# python-flask
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_FLASK_VERSION = 3.1.1
|
|
PYTHON_FLASK_SOURCE = flask-$(PYTHON_FLASK_VERSION).tar.gz
|
|
PYTHON_FLASK_SITE = https://files.pythonhosted.org/packages/c0/de/e47735752347f4128bcf354e0da07ef311a78244eba9e3dc1d4a5ab21a98
|
|
PYTHON_FLASK_SETUP_TYPE = flit
|
|
PYTHON_FLASK_LICENSE = BSD-3-Clause
|
|
PYTHON_FLASK_LICENSE_FILES = LICENSE.txt docs/license.rst
|
|
PYTHON_FLASK_CPE_ID_VENDOR = palletsprojects
|
|
PYTHON_FLASK_CPE_ID_PRODUCT = flask
|
|
|
|
$(eval $(python-package))
|