6971622747
python3-cbor2: more patch indent and test fixes
...
Similar to a previous patch, the CVE-2025-68131 patch
contained some more indentation errors, in the tests.
Also, the backported tests were inserted between an
existing test and its parameters - a new patch corrects
that.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com >
2026-04-13 17:30:24 +02:00
f19f8995e2
python3-cbor2: patch CVE-2025-68131
...
Backport the patch[1] which fixes this vulnerability as mentioned in the
comment[2].
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68131
[1] https://github.com/agronholm/cbor2/commit/f1d701cd2c411ee40bb1fe383afe7f365f35abf0
[2] https://github.com/agronholm/cbor2/pull/268#issuecomment-3719179000
Dropped changes to the changelog from the original commit.
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com >
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com >
2026-02-27 14:28:43 +01:00
cc53827cc3
python3-cbor2: ignore CVE-2025-64076
...
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64076
The vunerability was introduced in v5.6.0[1], the recipe version doesn't
contain the vulnerable piece of code.
[1]: https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com >
2026-01-08 22:03:03 +01:00
766027e83e
python3-cbor2: Fix LICENSE and LIC_FILES_CHKSUM
...
Both project pypi page: https://pypi.org/project/cbor2/ as well as
https://github.com/agronholm/cbor2/blob/5.4.2/LICENSE.txt state that it
is subject to MIT rather than Apache-2.0 license. Also update
LIC_FILES_CHKSUM value to reference the LICENSE.txt file from the
downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-09-22 10:13:07 -04:00
7f27771b28
Update for setuptools_build_meta renamed to python_setuptools_build_meta
...
Signed-off-by: Ross Burton <ross.burton@arm.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2022-03-19 19:00:34 -07:00
ff7312f048
meta-python: migrate away from setuptool3 where possible
...
Many recipes are currently building with setuptools3 but can use a more
modern tool: typically setuptools_build_meta but ordered-set can use
flit_core and pyrad can use poetry_core.
Signed-off-by: Ross Burton <ross.burton@arm.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com >
2022-03-11 08:48:38 -05:00
dbb4e34b57
python3-cbor2: upgrade 5.4.1 -> 5.4.2
...
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com >
2021-10-25 08:35:04 -07:00
Gyorgy Sarvari
Hitendra Prajapati
Niko Mauno
Ross Burton
zangrc