From fd620677ce54f86e5d881c6647111ef538e0b0e9 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Fri, 30 Jan 2026 08:06:19 +0100 Subject: [PATCH] python3-ecdsa: ignore CVE-2024-23342 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-23342 The issue won't be fixed, because it is not in the scope of the project. See also the discussion in the relevant Github issue[1]. [1]: https://github.com/tlsfuzzer/python-ecdsa/issues/330 Signed-off-by: Gyorgy Sarvari --- meta-python/recipes-devtools/python/python3-ecdsa_0.17.0.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-ecdsa_0.17.0.bb b/meta-python/recipes-devtools/python/python3-ecdsa_0.17.0.bb index 177019ccc2..8749e503f9 100644 --- a/meta-python/recipes-devtools/python/python3-ecdsa_0.17.0.bb +++ b/meta-python/recipes-devtools/python/python3-ecdsa_0.17.0.bb @@ -13,3 +13,6 @@ inherit pypi setuptools3 python3native RDEPENDS:${PN} += "python3-six python3-gmpy2 python3-pbr" BBCLASSEXTEND = "native nativesdk" + +# won't fix: https://github.com/tlsfuzzer/python-ecdsa/issues/330 +CVE_CHECK_IGNORE = "CVE-2024-23342"