mark.yang e0baff51a3 python3-pyopenssl: set CVE_PRODUCT ...

The pypi class default python:pyopenssl matches nothing in the CVE
databases, which have used four vendor spellings for pyOpenSSL over
the years:

* CVE-2013-4314 (jean-paul_calderone:pyopenssl)
* CVE-2018-1000807 (pyopenssl:pyopenssl)
* CVE-2018-1000808 (pyopenssl_project:pyopenssl)
* CVE-2026-27448, CVE-2026-27459 (pyca:pyopenssl in the CNA records,
  pyopenssl:pyopenssl in the NVD CPEs)

Set all four vendor:product pairs.

For scarthgap, python3-pyopenssl is 24.0.0. CVE-2026-27448 and
CVE-2026-27459 are fixed in 26.0.0, so this metadata change will
expose those CVEs as applicable/unpatched. The fixes for these CVEs
need to be handled separately.

Note: Original commit was for python3-pyopenssl_26.0.0.bb. This is
adjusted for scarthgap where recipe version is
python3-pyopenssl_24.0.0.bb.

(From OE-Core rev: f6cc7e0c0a4a906244fc8cd4b45706d42a931fce)

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ba3d752e577004f871fe7f4235e2625410140a08)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-08-24 11:43:44 +01:00

..

python3

python3: fix CVE-2026-9669

2026-07-22 21:08:54 +01:00

python3-atomicwrites

…

python3-attrs

python3-attrs: disable Hypothesis deadline

2024-03-01 09:32:13 +00:00

python3-bcrypt

python3-bcrypt: Fix build break on arches without 64 bit atomics

2024-02-29 10:26:13 +00:00

python3-calver

python3-calver: Add recipe

2023-05-11 17:08:29 +01:00

python3-certifi

python3-certifi: Fix CVE-2024-39689

2024-08-19 06:09:14 -07:00

python3-click

python3-click: Copy recipe from meta-python

2023-09-27 11:47:42 +01:00

python3-cryptography

python3-cryptography: Fix CVE-2026-26007

2026-04-02 13:41:54 +01:00

python3-dtc

python3-dtc: add from meta-virtualization

2023-07-25 15:27:33 +01:00

python3-hypothesis

…

python3-installer

…

python3-jinja2

…

python3-jsonpointer

python3-jsonpointer: upgrade to 2.4

2023-07-10 11:36:34 +01:00

python3-license-expression

python3-license-expression: Fix the ptest failure

2023-12-21 10:38:30 +00:00

python3-markupsafe

…

python3-maturin

python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc

2024-09-19 05:11:35 -07:00

python3-more-itertools

…

python3-numpy

python3-numpy: upgrade 1.26.3 -> 1.26.4

2024-02-09 13:55:06 +00:00

python3-pbr

…

python3-pip

python3-pip: Fix CVE-2026-1703

2026-03-25 17:34:13 +00:00

python3-pluggy

…

python3-pyasn1

python3-pyasn1: fix CVE-2026-23490

2026-05-04 13:57:31 +01:00

python3-pyopenssl

python3-pyopenssl: Fix CVE-2026-27459

2026-04-02 13:41:55 +01:00

python3-pytz

…

python3-pyyaml

python3-pyyaml: enable ptest

2024-02-10 14:13:24 +00:00

python3-requests

python3-requests: backport fix for CVE-2026-25645

2026-06-10 14:35:20 +01:00

python3-scons

…

python3-setuptools

python3-setuptools: Fix CVE-2026-59890

2026-07-31 16:41:22 +01:00

python3-setuptools-scm

python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES

2025-02-28 06:45:14 -08:00

python3-smartypants

…

python3-trove-classifiers

python3-trove-classifiers: Add recipe

2023-05-11 17:08:29 +01:00

python3-urllib3

python3-urllib3: fix CVE-2026-44431

2026-07-22 21:08:55 +01:00

python3-wcwidth

…

python3-webcolors

…

python3-wheel

python3-wheel: fix CVE-2026-24049

2026-05-04 13:57:31 +01:00

python3-xmltodict

python3-xmltodict: fix CVE-2025-9375

2025-10-24 06:23:39 -07:00

python3-zipp

python3-zipp: fix CVE-2024-5569

2024-12-06 05:50:24 -08:00

python-rfc3986-validator

…

python3_3.12.13.bb

python3: fix CVE-2026-9669

2026-07-22 21:08:54 +01:00

python3-alabaster_0.7.16.bb

python3-alabaster: upgrade 0.7.13 -> 0.7.16

2024-01-19 12:21:22 +00:00

python3-asn1crypto_1.5.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-atomicwrites_1.4.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-attrs_23.2.0.bb

python3-attrs: drop python3-ctypes from RDEPENDS

2024-08-01 06:08:09 -07:00

python3-babel_2.14.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-bcrypt_4.1.2.bb

python3-bcrypt: drop python3-six from RDEPENDS

2024-07-09 06:02:56 -07:00

python3-bcrypt-crates.inc

python3-bcrypt: Fix build break on arches without 64 bit atomics

2024-02-29 10:26:13 +00:00

python3-beartype_0.17.2.bb

python3-beartype: upgrade 0.17.0 -> 0.17.2

2024-03-01 09:28:51 +00:00

python3-booleanpy_4.0.bb

python3-booleanpy: Copy recipe from meta-python

2023-09-27 11:47:42 +01:00

python3-build_1.1.1.bb

python3-build: upgrade 1.0.3 -> 1.1.1

2024-03-07 17:25:02 +00:00

python3-calver_2022.6.26.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-certifi_2024.2.2.bb

python3-certifi: Fix CVE-2024-39689

2024-08-19 06:09:14 -07:00

python3-cffi_1.16.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-chardet_5.2.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-click_8.1.7.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-cryptography_42.0.5.bb

python3-cryptography: set CVE_PRODUCT

2026-07-31 16:41:22 +01:00

python3-cryptography-crates.inc

python3-cryptography{-vectors}: upgrade to 42.0.5

2024-02-29 10:26:13 +00:00

python3-cryptography-vectors_42.0.5.bb

python3-cryptography{-vectors}: upgrade to 42.0.5

2024-02-29 10:26:13 +00:00

python3-cython_3.0.8.bb

python3-cython: upgrade 3.0.7 -> 3.0.8

2024-01-19 12:21:23 +00:00

python3-dbus_1.3.2.bb

…

python3-dbusmock_0.31.1.bb

python3-dbusmock: upgrade 0.30.2 -> 0.31.1

2024-03-01 09:28:51 +00:00

python3-docutils_0.20.1.bb

python3-docutils: Rename utilities to their canonical names

2023-10-04 23:55:12 +01:00

python3-dtc_1.7.0.bb

python3-dtc: upgrade 1.6.1 -> 1.7.0

2023-08-24 16:50:24 +01:00

python3-dtschema_2024.2.bb

python3-dtschema: upgrade 2023.7 -> 2024.2

2024-03-07 17:25:02 +00:00

python3-editables_0.5.bb

python3-editables: upgrade 0.4 -> 0.5

2023-08-14 12:51:21 +01:00

python3-extras_1.0.0.bb

…

python3-flit-core_3.9.0.bb

python3-flit-core: upgrade 3.8.0 -> 3.9.0

2023-06-16 15:40:11 +01:00

python3-git_3.1.42.bb

python3-git: upgrade 3.1.41 -> 3.1.42

2024-02-29 10:26:13 +00:00

python3-gitdb_4.0.11.bb

python3-gitdb: upgrade 4.0.10 -> 4.0.11

2023-11-05 11:28:42 +00:00

python3-hatch-fancy-pypi-readme_24.1.0.bb

python3-hatch-fancy-pypi-readme: upgrade 23.1.0 -> 24.1.0

2024-01-07 12:24:57 +00:00

python3-hatch-vcs_0.4.0.bb

python3-hatch-vcs: upgrade 0.3.0 -> 0.4.0

2023-11-20 15:30:52 +00:00

python3-hatchling_1.21.1.bb

python3-hatchling: upgrade 1.21.0 -> 1.21.1

2024-02-14 13:53:35 +00:00

python3-hypothesis_6.98.15.bb

python3-hypothesis: upgrade 6.98.12 -> 6.98.15

2024-03-05 12:24:49 +00:00

python3-idna_3.7.bb

python3-idna: upgrade 3.6 -> 3.7

2024-08-01 06:08:09 -07:00

python3-imagesize_1.4.1.bb

meta/recipes: ensure all recipes have a SUMMARY

2023-04-13 13:53:44 +01:00

python3-importlib-metadata_7.0.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-iniconfig_2.0.0.bb

…

python3-iniparse_0.5.bb

…

python3-installer_0.7.0.bb

python3-installer: add missing run-time dependencies

2023-05-22 10:53:49 +01:00

python3-iso8601_2.1.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-isodate_0.6.1.bb

python3-isodate: add homepage

2023-09-27 11:47:42 +01:00

python3-jinja2_3.1.6.bb

python3-jinja2: upgrade 3.1.4 -> 3.1.6

2025-04-28 08:18:53 -07:00

python3-jsonpointer_2.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-jsonschema_4.21.1.bb

python3-jsonschema: upgrade 4.17.3 -> 4.21.1 and add new dependencies

2024-03-07 17:25:02 +00:00

python3-jsonschema-specifications_2023.12.1.bb

python3-jsonschema-specifications: drop ${PYTHON_PN}

2024-04-13 14:39:07 +01:00

python3-libarchive-c_5.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-license-expression_30.2.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-lxml_5.0.2.bb

python3-lxml=v5.0.2

2024-11-09 05:53:57 -08:00

python3-magic_0.4.27.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-mako_1.3.2.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-markdown_3.5.2.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-markupsafe_2.1.5.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-maturin_1.4.0.bb

python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc

2024-09-19 05:11:35 -07:00

python3-maturin-crates.inc

python3-maturin: add v1.4.0

2023-12-17 19:07:21 +00:00

python3-meson-python_0.15.0.bb

python3-meson-python: move from meta-python

2024-02-20 11:39:45 +00:00

python3-more-itertools_10.2.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-ndg-httpsclient_0.5.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-numpy_1.26.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-packaging_23.2.bb

python3-packaging: upgrade 23.1 -> 23.2

2023-10-19 13:38:57 +01:00

python3-pathlib2_2.3.7.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pathspec_0.12.1.bb

python3-pathspec: upgrade 0.11.2 -> 0.12.1

2023-12-23 08:46:00 +00:00

python3-pbr_6.0.0.bb

python3-pbr: upgrade 5.11.1 -> 6.0.0

2023-11-20 15:30:52 +00:00

python3-pip_24.0.bb

python3-pip: drop unused Windows distlib launcher templates

2026-03-25 17:34:13 +00:00

python3-pluggy_1.4.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-ply_3.11.bb

python3-ply: set CVE_PRODUCT

2026-07-31 16:41:22 +01:00

python3-poetry-core_1.9.0.bb

python3-poetry-core: drop python3-six from RDEPENDS

2024-12-13 05:21:54 -08:00

python3-pretend_1.0.9.bb

…

python3-psutil_5.9.8.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-py_1.11.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pyasn1_0.5.1.bb

python3-pyasn1: set CVE_PRODUCT

2026-07-31 16:41:22 +01:00

python3-pycairo_1.26.0.bb

python3-pycairo: upgrade 1.25.1 -> 1.26.0

2024-03-01 09:28:52 +00:00

python3-pycparser_2.21.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pycryptodome_3.20.0.bb

python3-pycryptodome(x): use python_setuptools_build_meta build class

2024-08-19 06:09:14 -07:00

python3-pycryptodomex_3.20.0.bb

python3-pycryptodome(x): use python_setuptools_build_meta build class

2024-08-19 06:09:14 -07:00

python3-pyelftools_0.30.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pygments_2.17.2.bb

python3-pygments: upgrade 2.16.1 -> 2.17.2

2023-12-06 22:55:49 +00:00

python3-pygobject_3.46.0.bb

gnomebase.bbclass: Use meson as default buildsystem

2023-11-13 11:38:03 +00:00

python3-pyopenssl_24.0.0.bb

python3-pyopenssl: set CVE_PRODUCT

2026-08-24 11:43:44 +01:00

python3-pyparsing_3.1.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pyproject-hooks_1.0.0.bb

python3-pyproject-hooks: fix upstream version check

2023-11-30 08:43:04 +00:00

python3-pyproject-metadata_0.7.1.bb

python3-pyproject-metadata: HOMEPAGE; DESCRIPTION

2024-02-20 11:39:45 +00:00

python3-pyrsistent_0.20.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pysocks_1.7.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pytest_8.0.2.bb

python3-pytest: upgrade 8.0.0 -> 8.0.2

2024-03-01 09:28:52 +00:00

python3-pytest-runner_6.0.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pytest-subtests_0.11.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-pytz_2024.1.bb

python3-pytz: upgrade 2023.4 -> 2024.1

2024-03-01 09:28:52 +00:00

python3-pyyaml_6.0.1.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-rdflib_7.0.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-referencing_0.33.0.bb

python3-referencing: drop ${PYTHON_PN}

2024-04-13 14:39:07 +01:00

python3-requests_2.32.4.bb

python3-requests: backport fix for CVE-2026-25645

2026-06-10 14:35:20 +01:00

python3-rfc3339-validator_0.1.4.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-rfc3986-validator_0.1.1.bb

…

python3-rfc3987_1.3.8.bb

…

python3-rpds-py_0.18.0.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-rpds-py-crates.inc

python3-jsonschema: upgrade 4.17.3 -> 4.21.1 and add new dependencies

2024-03-07 17:25:02 +00:00

python3-ruamel-yaml_0.18.6.bb

python3-ruamel-yaml: upgrade 0.17.35 -> 0.18.6

2024-03-07 17:25:02 +00:00

python3-scons_4.6.0.bb

python3-scons: upgrade 4.5.2 -> 4.6.0

2023-11-30 08:43:03 +00:00

python3-semantic-version_2.10.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-setuptools_69.1.1.bb

python3-setuptools: Fix CVE-2026-59890

2026-07-31 16:41:22 +01:00

python3-setuptools-rust_1.9.0.bb

python3-setuptools-rust: upgrade 1.8.1 -> 1.9.0

2024-03-01 09:28:52 +00:00

python3-setuptools-scm_8.0.4.bb

python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES

2025-02-28 06:45:14 -08:00

python3-six_1.16.0.bb

…

python3-smartypants_2.0.0.bb

…

python3-smmap_6.0.0.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-snowballstemmer_2.2.0.bb

…

python3-sortedcontainers_2.4.0.bb

…

python3-spdx-tools_0.8.2.bb

python3-spdx-tools: upgrade 0.8.1 -> 0.8.2

2023-11-05 11:28:32 +00:00

python3-sphinx_7.2.6.bb

python3-sphinx: upgrade 7.2.5 -> 7.2.6

2023-09-26 10:35:27 +01:00

python3-sphinx-rtd-theme_2.0.0.bb

python3-sphinxcontrib-jquery: add a recipe and make python3-sphinx-rtd-theme depend on it

2024-03-07 17:25:02 +00:00

python3-sphinxcontrib-applehelp_1.0.8.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-devhelp_1.0.6.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-htmlhelp_2.0.5.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-jquery_4.1.bb

python3-sphinxcontrib-jquery: add a recipe and make python3-sphinx-rtd-theme depend on it

2024-03-07 17:25:02 +00:00

python3-sphinxcontrib-jsmath_1.0.1.bb

meta/recipes: ensure all recipes have a SUMMARY

2023-04-13 13:53:44 +01:00

python3-sphinxcontrib-qthelp_1.0.7.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-sphinxcontrib-serializinghtml_1.1.10.bb

python-*: don't set PYPI_ARCHIVE_NAME and S when PYPI_PACKAGE is sufficient

2024-03-22 16:27:48 +00:00

python3-subunit_1.4.4.bb

python3-subunit: Add missing module dependency

2024-01-24 15:46:19 +00:00

python3-testtools_2.7.1.bb

python3-testtools: Fix build problems from incorrect build backend

2024-04-14 06:28:02 +01:00

python3-toml_0.10.2.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-tomli_2.0.1.bb

python3-tomli: add missing run-time dependencies

2023-05-22 10:53:49 +01:00

python3-trove-classifiers_2024.2.23.bb

python3-trove-classifiers: upgrade 2024.1.8 -> 2024.2.23

2024-03-01 09:28:52 +00:00

python3-typing-extensions_4.10.0.bb

python3-typing-extensions: upgrade 4.9.0 -> 4.10.0

2024-03-01 09:28:52 +00:00

python3-typogrify_2.0.7.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-unittest-automake-output_0.2.bb

python3-unittest-automake-output: upgrade to 0.2

2024-02-15 09:18:09 +00:00

python3-uritools_4.0.2.bb

python3-uritools: add recipe

2023-09-27 11:47:42 +01:00

python3-urllib3_2.2.2.bb

python3-urllib3: fix CVE-2026-44431

2026-07-22 21:08:55 +01:00

python3-vcversioner_2.16.0.0.bb

…

python3-wcwidth_0.2.13.bb

python3-wcwidth: upgrade 0.2.12 -> 0.2.13

2024-03-07 17:25:03 +00:00

python3-webcolors_1.13.bb

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python3-websockets_12.0.bb

python3-websockets: Import from meta-python

2024-04-14 06:28:02 +01:00

python3-wheel_0.42.0.bb

python3-wheel: fix CVE-2026-24049

2026-05-04 13:57:31 +01:00

python3-xmltodict_0.13.0.bb

python3-xmltodict: fix CVE-2025-9375

2025-10-24 06:23:39 -07:00

python3-yamllint_1.35.1.bb

python3-yamllint: upgrade 1.33.0 -> 1.35.1

2024-03-01 09:28:52 +00:00

python3-zipp_3.17.0.bb

python3-zipp: fix CVE-2024-5569

2024-12-06 05:50:24 -08:00

python-cython.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-extras.inc

…

python-pbr.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00

python-pyasn1.inc

python3-pyasn1: fix CVE-2026-23490

2026-05-04 13:57:31 +01:00

python-pycryptodome.inc

python3-pycryptodome: add missing run-time dependencies

2023-05-22 10:53:49 +01:00

python-six.inc

python: Drop ${PYTHON_PN}

2024-02-20 11:39:45 +00:00