mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
e0baff51a3
The pypi class default python:pyopenssl matches nothing in the CVE databases, which have used four vendor spellings for pyOpenSSL over the years: * CVE-2013-4314 (jean-paul_calderone:pyopenssl) * CVE-2018-1000807 (pyopenssl:pyopenssl) * CVE-2018-1000808 (pyopenssl_project:pyopenssl) * CVE-2026-27448, CVE-2026-27459 (pyca:pyopenssl in the CNA records, pyopenssl:pyopenssl in the NVD CPEs) Set all four vendor:product pairs. For scarthgap, python3-pyopenssl is 24.0.0. CVE-2026-27448 and CVE-2026-27459 are fixed in 26.0.0, so this metadata change will expose those CVEs as applicable/unpatched. The fixes for these CVEs need to be handled separately. Note: Original commit was for python3-pyopenssl_26.0.0.bb. This is adjusted for scarthgap where recipe version is python3-pyopenssl_24.0.0.bb. (From OE-Core rev: f6cc7e0c0a4a906244fc8cd4b45706d42a931fce) Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit ba3d752e577004f871fe7f4235e2625410140a08) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
29 lines
828 B
BlitzBasic
29 lines
828 B
BlitzBasic
SUMMARY = "Simple Python wrapper around the OpenSSL library"
|
|
HOMEPAGE = "https://pyopenssl.org/"
|
|
LICENSE = "Apache-2.0"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
|
|
|
|
DEPENDS += "openssl python3-cryptography"
|
|
|
|
SRC_URI[sha256sum] = "6aa33039a93fffa4563e655b61d11364d01264be8ccb49906101e02a334530bf"
|
|
|
|
PYPI_PACKAGE = "pyOpenSSL"
|
|
CVE_PRODUCT = "jean-paul_calderone:pyopenssl pyca:pyopenssl pyopenssl:pyopenssl pyopenssl_project:pyopenssl"
|
|
inherit pypi setuptools3
|
|
|
|
SRC_URI += " \
|
|
file://CVE-2026-27448.patch \
|
|
file://CVE-2026-27459.patch \
|
|
"
|
|
|
|
PACKAGES =+ "${PN}-tests"
|
|
FILES:${PN}-tests = "${libdir}/${PYTHON_DIR}/site-packages/OpenSSL/test"
|
|
|
|
RDEPENDS:${PN}:class-target = " \
|
|
python3-cryptography \
|
|
python3-threading \
|
|
"
|
|
RDEPENDS:${PN}-tests = "${PN}"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|