diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2025-12-30 15:28:59 +0100 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2025-12-31 08:28:54 -0800 |
| commit | 6f2ce3843ec809c63f0818fe1e8f5daec54fe78f (patch) | |
| tree | 95be87472f1e7cfd0521a9dc463cb7aa195003e5 /meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb | |
| parent | 5dd59b03f8144b9530155ba6f0af6fe8d788c7dd (diff) | |
| download | meta-openembedded-6f2ce3843ec809c63f0818fe1e8f5daec54fe78f.tar.gz | |
python3-werkzeug: set CVE_PRODUCT
The relevant CVEs are tracked using palletsprojects:werkzeug CPE, which makes
the the default python:werkzeug CPE to not match anything.
See CVE db query:
sqlite> select * from products where PRODUCT like 'werkzeug';
CVE-2016-10516|palletsprojects|werkzeug|||0.11.11|<
CVE-2019-14322|palletsprojects|werkzeug|||0.15.5|<
CVE-2019-14806|palletsprojects|werkzeug|||0.15.3|<
CVE-2020-28724|palletsprojects|werkzeug|||0.11.6|<
CVE-2022-29361|palletsprojects|werkzeug|||2.1.0|<=
CVE-2023-23934|palletsprojects|werkzeug|||2.2.3|<
CVE-2023-25577|palletsprojects|werkzeug|||2.2.3|<
CVE-2023-46136|palletsprojects|werkzeug|||2.3.8|<
CVE-2023-46136|palletsprojects|werkzeug|3.0.0|=||
CVE-2024-34069|palletsprojects|werkzeug|||3.0.3|<
CVE-2024-49766|palletsprojects|werkzeug|||3.0.6|<
CVE-2024-49767|palletsprojects|werkzeug|||3.0.6|<
CVE-2025-66221|palletsprojects|werkzeug|||3.1.4|<
Set the CVE_PRODUCT so it matches the relevant entries.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb b/meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb index 2cfb5864b1..0886dbfef1 100644 --- a/meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb +++ b/meta-python/recipes-devtools/python/python3-werkzeug_3.1.4.bb | |||
| @@ -12,6 +12,8 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=5dc88300786f1c214c1e9827a5229462" | |||
| 12 | 12 | ||
| 13 | SRC_URI[sha256sum] = "cd3cd98b1b92dc3b7b3995038826c68097dcb16f9baa63abe35f20eafeb9fe5e" | 13 | SRC_URI[sha256sum] = "cd3cd98b1b92dc3b7b3995038826c68097dcb16f9baa63abe35f20eafeb9fe5e" |
| 14 | 14 | ||
| 15 | CVE_PRODUCT = "werkzeug" | ||
| 16 | |||
| 15 | inherit pypi python_flit_core | 17 | inherit pypi python_flit_core |
| 16 | 18 | ||
| 17 | RDEPENDS:${PN} += " \ | 19 | RDEPENDS:${PN} += " \ |
