summaryrefslogtreecommitdiffstats
path: root/meta-python
diff options
context:
space:
mode:
authorGyorgy Sarvari <skandigraun@gmail.com>2026-03-18 20:35:57 +0100
committerAnuj Mittal <anuj.mittal@oss.qualcomm.com>2026-03-26 10:29:24 +0530
commit6e9eff155e92efdc7b809b7a1afb71f9b5dc4c8e (patch)
tree7c985fde65954e669bbc6c1d4abf5778c4bf6816 /meta-python
parent0efa1d57b60be58564d9d017e3063a93cf69d922 (diff)
downloadmeta-openembedded-6e9eff155e92efdc7b809b7a1afb71f9b5dc4c8e.tar.gz
python3-marshmallow: mark CVE-2025-68480 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68480 The vulnerability has been fixed in version 4.1.2[1], however NVD tracks this CVE without version info. Mark it as patched explicitly. [1]: https://github.com/marshmallow-code/marshmallow/commit/d24a0c9df061c4daa92f71cf85aca25b83eee508 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-python')
-rw-r--r--meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb b/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb
index f3a905a36c..f058bd7123 100644
--- a/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb
+++ b/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb
@@ -30,3 +30,5 @@ RDEPENDS:${PN} += " \
30 python3-pprint \ 30 python3-pprint \
31 python3-packaging \ 31 python3-packaging \
32" 32"
33
34CVE_STATUS[CVE-2025-68480] = "fixed-version: fixed in 4.1.2"