mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
ab57645a22
With this change, 1 Patched CVE is properly reported: * CVE-2023-52323 (From OE-Core rev: c130a84998e9d22a5a228acc677676620853bb57) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit c2a2ae48add874f41c5b60ca90ba3a26ebb0fe38) The current pypi default "python:pycryptodomex" has no matching NVD CPE or configuration identity. Use "pycryptodome:pycryptodomex", the active NVD dictionary CPE and configuration identity for the packaged distribution, so CVE-2023-52323 is properly reported as patched. Note: The original commit targeted python3-pycryptodomex_3.23.0.bb. This is adjusted for Scarthgap, where the recipe version is 3.20.0. Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
12 lines
349 B
BlitzBasic
12 lines
349 B
BlitzBasic
require python-pycryptodome.inc
|
|
inherit python_setuptools_build_meta
|
|
|
|
SRC_URI[sha256sum] = "7a710b79baddd65b806402e14766c721aee8fb83381769c27920f26476276c1e"
|
|
|
|
CVE_PRODUCT = "pycryptodome:pycryptodomex"
|
|
|
|
FILES:${PN}-tests = " \
|
|
${PYTHON_SITEPACKAGES_DIR}/Cryptodome/SelfTest/ \
|
|
${PYTHON_SITEPACKAGES_DIR}/Cryptodome/SelfTest/__pycache__/ \
|
|
"
|