mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-21 22:50:24 +00:00
python3-web3: Fix CVE-2026-40072
This patch applies the upstream v7 backport for CVE-2026-40072. The upstream fix commit is referenced in [1], and the public CVE advisory is referenced in [2]. [1] https://github.com/ApeWorX/web3.py/commit/d62e67d3b636bd4c5a929696c0f5c4167c31625b [2] https://github.com/advisories/GHSA-5hr4-253g-cpx2 Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
@@ -4,6 +4,7 @@ SECTION = "devel/python"
|
||||
LICENSE = "MIT"
|
||||
LIC_FILES_CHKSUM = "file://LICENSE;md5=1d34d9701a1461e4bd71a904ac4cf7be"
|
||||
|
||||
SRC_URI += "file://CVE-2026-40072.patch"
|
||||
SRC_URI[sha256sum] = "97f6a116ccaeb5907bb4cb6c771cc23bc942bf09528a840189e9b509b7b8347c"
|
||||
|
||||
inherit pypi setuptools3
|
||||
|
||||
Reference in New Issue
Block a user