mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-13 17:39:57 +00:00
python3-cbor2: ignore CVE-2025-64076
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64076 The vunerability was introduced in v5.6.0[1], the recipe version doesn't contain the vulnerable piece of code. [1]: https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
@@ -12,6 +12,9 @@ SRC_URI += " \
|
||||
file://run-ptest \
|
||||
"
|
||||
|
||||
# not vulnerable yet, vulnerability was introduced in v5.6.0
|
||||
CVE_CHECK_IGNORE = "CVE-2025-64076"
|
||||
|
||||
RDEPENDS:${PN}-ptest += " \
|
||||
${PYTHON_PN}-pytest \
|
||||
${PYTHON_PN}-unixadmin \
|
||||
|
||||
Reference in New Issue
Block a user