python3-ecdsa: set CVE_PRODUCT

mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-13 17:39:57 +00:00

Set the correct CVE_PRODUCT value, the default python: ecdsa doesn't
match relevant entries.

The correct values were taken from the CVE db, by checking which CVEs
are relevant.

See CVE db query:
sqlite> select * from products where product like '%ecdsa%';
CVE-2019-14853|python-ecdsa_project|python-ecdsa|||0.13.3|<
CVE-2019-14859|python-ecdsa_project|python-ecdsa|||0.13.3|<
CVE-2020-12607|antonkueltz|fastecdsa|||2.1.2|<
CVE-2021-43568|starkbank|elixir_ecdsa|1.0.0|=||
CVE-2021-43569|starkbank|ecdsa-dotnet|1.3.2|=||
CVE-2021-43570|starkbank|ecdsa-java|1.0.0|=||
CVE-2021-43571|starkbank|ecdsa-node|1.1.2|=||
CVE-2021-43572|starkbank|ecdsa-python|||2.0.1|<
CVE-2022-24884|ecdsautils_project|ecdsautils|||0.4.1|<
CVE-2024-21502|antonkueltz|fastecdsa|||2.3.2|<
CVE-2024-23342|tlsfuzzer|ecdsa|||0.18.0|<=

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7f962ef155)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

This commit is contained in:

Gyorgy Sarvari

2026-05-07 21:06:11 -07:00

committed by

Anuj Mittal

parent 6b76759967

commit 3fd10def49

1 changed files with 2 additions and 0 deletions

									
										meta-python/recipes-devtools/python/python3-ecdsa_0.19.0.bb
									
		+2
		
												View File
												
				@@ -13,6 +13,8 @@ SRC_URI += " \

					file://CVE-2026-33936.patch \

				"

				CVE_PRODUCT = "python-ecdsa_project:python-ecdsa tlsfuzzer:ecdsa"

				RDEPENDS:${PN}-ptest += " \

					python3-hypothesis \

					python3-pytest \