mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 21:49:33 +02:00
The default python:pyasn1 does not match the NVD/CNA entries which use pyasn1 as vendor, so CVEs like CVE-2026-30922 are never reported. Use the exact pyasn1:pyasn1 pair. Note: Original commit was for python3-pyasn1_0.6.3.bb. This is adjusted for scarthgap where recipe version is python3-pyasn1_0.5.1.bb. Suggested-by: Ross Burton <ross.burton@arm.com> (From OE-Core rev: 4c2a8f74464cf3b7143bd9e978eef976aea6315e) Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 4971337840e8855740409e8f5dadb3ab3661f033) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
5 lines
82 B
BlitzBasic
5 lines
82 B
BlitzBasic
inherit pypi setuptools3
|
|
require python-pyasn1.inc
|
|
|
|
CVE_PRODUCT = "pyasn1:pyasn1"
|