summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools/python
diff options
context:
space:
mode:
authorShunsuke Tokumoto <s-tokumoto@fujitsu.com>2024-09-26 20:01:03 +0900
committerRichard Purdie <richard.purdie@linuxfoundation.org>2024-09-30 17:07:17 +0100
commitfabbfb295744eb2480c6f5585c42664b00138ce0 (patch)
tree1f569b544492b89a1458a47f2d2a673c58ff258d /meta/recipes-devtools/python
parentb0eb2b9b3660dfda1c4c43cfcca6a2c4a84d6dc8 (diff)
downloadpoky-fabbfb295744eb2480c6f5585c42664b00138ce0.tar.gz
python3-setuptools: Add "python:setuptools" to CVE_PRODUCT
Since there are vulnerabilities that cannot be detected by the existing CVE_PRODUCT, add "python:setuptools" to CVE_PRODUCT. https://nvd.nist.gov/vuln/detail/CVE-2013-1633 https://nvd.nist.gov/vuln/detail/CVE-2022-40897 (From OE-Core rev: aa1c8d97efc6640a1cffa2459d9b20ad1f7309b0) Signed-off-by: Shunsuke Tokumoto <s-tokumoto@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/python')
-rw-r--r--meta/recipes-devtools/python/python3-setuptools_72.1.0.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-devtools/python/python3-setuptools_72.1.0.bb b/meta/recipes-devtools/python/python3-setuptools_72.1.0.bb
index 945d443aff..5a01111934 100644
--- a/meta/recipes-devtools/python/python3-setuptools_72.1.0.bb
+++ b/meta/recipes-devtools/python/python3-setuptools_72.1.0.bb
@@ -6,6 +6,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=141643e11c48898150daa83802dbc65f"
6 6
7inherit pypi python_setuptools_build_meta 7inherit pypi python_setuptools_build_meta
8 8
9CVE_PRODUCT = "python3-setuptools python:setuptools"
10
9SRC_URI:append:class-native = " file://0001-conditionally-do-not-fetch-code-by-easy_install.patch" 11SRC_URI:append:class-native = " file://0001-conditionally-do-not-fetch-code-by-easy_install.patch"
10 12
11SRC_URI += " \ 13SRC_URI += " \