mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
b13a89f19d
Using the pypi.bbclass default CPE of python:GitPython detects no CVEs. With CVE_PRODUCT = "gitpython_project:gitpython" we properly detect 9 CVEs, with 4 unpatched. WARNING: python3-git-3.1.42-r0 do_cve_check: Found unpatched CVEs: CVE-2026-42215, CVE-2026-42284, CVE-2026-44243, CVE-2026-44244 Note: The original commit targeted python3-git_3.1.43.bb. This is adjusted for Scarthgap, where the recipe version is 3.1.42. (From OE-Core rev: 0c9e81e2b248c15054c8a847f043aea994b8adbe) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 3a6af75a33b4e007f0d3a247b6a149e32d51e510) Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
41 lines
1.4 KiB
BlitzBasic
41 lines
1.4 KiB
BlitzBasic
SUMMARY = "Python library used to interact with Git repositories"
|
|
DESCRIPTION = "GitPython provides object model read and write access to \
|
|
a git repository. Access repository information conveniently, alter the \
|
|
index directly, handle remotes, or go down to low-level object database \
|
|
access with big-files support."
|
|
HOMEPAGE = "http://github.com/gitpython-developers/GitPython"
|
|
SECTION = "devel/python"
|
|
LICENSE = "BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=5279a7ab369ba336989dcf2a107e5c8e"
|
|
|
|
PYPI_PACKAGE = "GitPython"
|
|
|
|
CVE_PRODUCT = "gitpython_project:gitpython"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
SRC_URI += "file://CVE-2026-42284.patch \
|
|
file://CVE-2026-44243_p1.patch \
|
|
file://CVE-2026-44243_p2.patch \
|
|
file://CVE-2026-44244_p1.patch \
|
|
file://CVE-2026-44244_p2.patch \
|
|
"
|
|
SRC_URI[sha256sum] = "2d99869e0fef71a73cbd242528105af1d6c1b108c60dfabd994bf292f76c3ceb"
|
|
|
|
DEPENDS += " python3-gitdb"
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-datetime \
|
|
python3-gitdb \
|
|
python3-io \
|
|
python3-logging \
|
|
python3-math \
|
|
python3-netclient \
|
|
python3-stringold \
|
|
python3-unittest \
|
|
python3-unixadmin \
|
|
git \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|