summaryrefslogtreecommitdiffstats
path: root/meta-python
diff options
context:
space:
mode:
authorGyorgy Sarvari <skandigraun@gmail.com>2026-02-05 07:59:41 +0100
committerAnuj Mittal <anuj.mittal@oss.qualcomm.com>2026-02-19 08:20:22 +0530
commit341e1204be70f4864416c93859e72af80088518a (patch)
treeeed3a8acfc515eb34da185e1288c59d62ac444d0 /meta-python
parent49cf55619b0a3df2e41b7332ba4cb7e92ad2f272 (diff)
downloadmeta-openembedded-341e1204be70f4864416c93859e72af80088518a.tar.gz
python3-m2crypto: mark CVE-2020-25657 as patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-25657 The commit[1] that fixes the vulnerability has been part of the package since version 0.39.0 [1]: https://git.sr.ht/~mcepl/m2crypto/commit/84c53958def0f510e92119fca14d74f94215827a Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit ba6468f7a09bf8e268ea5ac7939925c362ead876) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-python')
-rw-r--r--meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb1
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb b/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb
index efb6c79fa7..e534d32028 100644
--- a/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb
+++ b/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb
@@ -13,6 +13,7 @@ SRC_URI += " \
13" 13"
14 14
15CVE_STATUS[CVE-2009-0127] = "disputed: upstream claims there is no bug" 15CVE_STATUS[CVE-2009-0127] = "disputed: upstream claims there is no bug"
16CVE_STATUS[CVE-2020-25657] = "fixed-version: the used version (0.46.2) contains the fix already"
16 17
17inherit pypi siteinfo python_setuptools_build_meta 18inherit pypi siteinfo python_setuptools_build_meta
18 19