diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2025-12-30 15:29:01 +0100 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2025-12-31 08:28:54 -0800 |
| commit | 5ec4458878a1ae2cdd59e0950464ecaa5e07b2dc (patch) | |
| tree | 6c775bb09ca5b13e79669f3158ffd0db788eeeef /meta-python | |
| parent | 851e449d546f3680ae764e44f04bfb5d2017634b (diff) | |
| download | meta-openembedded-5ec4458878a1ae2cdd59e0950464ecaa5e07b2dc.tar.gz | |
python3-pyjwt: set CVE_PRODUCT
The relevant CVEs are tracked using pyjwt_project:pyjwt CPE, so the
defauly python:pyjwt CPE doesn't match them.
See CVE db query:
sqlite> select * from products where PRODUCT like '%pyjwt%';
CVE-2017-11424|pyjwt_project|pyjwt|||1.5.0|<=
CVE-2022-29217|pyjwt_project|pyjwt|1.5.0|>=|2.4.0|<
CVE-2024-53861|pyjwt_project|pyjwt|2.10.0|=||
CVE-2025-45768|pyjwt_project|pyjwt|2.10.1|=||
Set the CVE_PRODUCT so it matches relevant CVEs.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-python')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-pyjwt_2.10.1.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.10.1.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.10.1.bb index d23347878e..37675f1b63 100644 --- a/meta-python/recipes-devtools/python/python3-pyjwt_2.10.1.bb +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.10.1.bb | |||
| @@ -8,6 +8,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551" | |||
| 8 | SRC_URI[sha256sum] = "3cc5772eb20009233caf06e9d8a0577824723b44e6648ee0a2aedb6cf9381953" | 8 | SRC_URI[sha256sum] = "3cc5772eb20009233caf06e9d8a0577824723b44e6648ee0a2aedb6cf9381953" |
| 9 | 9 | ||
| 10 | PYPI_PACKAGE = "pyjwt" | 10 | PYPI_PACKAGE = "pyjwt" |
| 11 | CVE_PRODUCT = "pyjwt" | ||
| 11 | inherit pypi python_setuptools_build_meta | 12 | inherit pypi python_setuptools_build_meta |
| 12 | 13 | ||
| 13 | RDEPENDS:${PN} = "\ | 14 | RDEPENDS:${PN} = "\ |