Files
rpi-buildroot/package/micropython/micropython.hash
Thomas Perale 294e3a40bb package/micropython: bump to version 1.22.2
This version bump removes CVE-2023-7152, which was incorrectly associated
with the micropython package in pkg-stats.

Although the CVE fix was already present in 1.22.0 the CVE only applied
to the preview version of 1.22.0. The CPE ID of the 1.22.0 matched with the
CPE ID of the 1.22.0 preview version as well.

This patch bumps to the latest patch-level version available in the 1.22.x
series to include additional fixes, rather than just adding the CVE to the
'MICROPYTHON_IGNORE_CVES' list.

The LICENSE hash has been updated, as the licenses used for the ports and
libraries have also been updated in the LICENSE file.

For more details on the version bump, see the release notes:
  - https://github.com/micropython/micropython/releases/tag/v1.22.2
  - https://github.com/micropython/micropython/releases/tag/v1.22.1

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-04-25 18:43:39 +02:00

4 lines
200 B
Plaintext

#locally computed
sha256 bb3ba34848a7620663b6a7cba22af45d3056fc79328c2ceb943874b5478d8756 micropython-1.22.2.tar.xz
sha256 fe63a3fbd0731f6530e0783224763bceef972e516cab4b8513ca4d7b05be9713 LICENSE