mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-07-15 16:07:26 +00:00
Code Issues Projects Releases Wiki Activity

python3-cbor2: ignore CVE-2025-64076

Browse Source 
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64076

The vunerability was introduced in v5.6.0[1], the recipe version doesn't
contain the vulnerable piece of code.

[1]: https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
This commit is contained in:
Gyorgy Sarvari
2026-01-05 09:31:59 +01:00
parent d5e94ee2b8
commit cc53827cc3
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-cbor2_5.4.2.bb
+3
View File
@@ -12,6 +12,9 @@ SRC_URI += " \
file://run-ptest \ file://run-ptest \
" "
# not vulnerable yet, vulnerability was introduced in v5.6.0
CVE_CHECK_IGNORE = "CVE-2025-64076"
RDEPENDS:${PN}-ptest += " \ RDEPENDS:${PN}-ptest += " \
${PYTHON_PN}-pytest \ ${PYTHON_PN}-pytest \
${PYTHON_PN}-unixadmin \ ${PYTHON_PN}-unixadmin \