diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-03-18 20:35:57 +0100 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@oss.qualcomm.com> | 2026-03-26 10:29:24 +0530 |
| commit | 6e9eff155e92efdc7b809b7a1afb71f9b5dc4c8e (patch) | |
| tree | 7c985fde65954e669bbc6c1d4abf5778c4bf6816 /meta-python | |
| parent | 0efa1d57b60be58564d9d017e3063a93cf69d922 (diff) | |
| download | meta-openembedded-6e9eff155e92efdc7b809b7a1afb71f9b5dc4c8e.tar.gz | |
python3-marshmallow: mark CVE-2025-68480 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68480
The vulnerability has been fixed in version 4.1.2[1], however
NVD tracks this CVE without version info. Mark it as patched explicitly.
[1]: https://github.com/marshmallow-code/marshmallow/commit/d24a0c9df061c4daa92f71cf85aca25b83eee508
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-python')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb b/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb index f3a905a36c..f058bd7123 100644 --- a/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb +++ b/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb | |||
| @@ -30,3 +30,5 @@ RDEPENDS:${PN} += " \ | |||
| 30 | python3-pprint \ | 30 | python3-pprint \ |
| 31 | python3-packaging \ | 31 | python3-packaging \ |
| 32 | " | 32 | " |
| 33 | |||
| 34 | CVE_STATUS[CVE-2025-68480] = "fixed-version: fixed in 4.1.2" | ||
