mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-04 17:10:17 +00:00
Code Issues Projects Releases Wiki Activity
38,373 Commits 64 Branches 0 Tags
4ddd1e39453deee8092f568a6f344598aa075ab0
Commit Graph
3 Commits
Author SHA1 Message Date
Devansh Patel ecbab436e2 python3-web3: add CVE_PRODUCT mapping 
The current inherited "python:web3" mapping does not match the web3.py identities used by NVD and CVE List V5, so its source-aligned CVE is missed.

Use "ethereum:web3.py" for the CNA affected-data identity and "apeworx:web3.py" for the NVD dictionary CPE and configuration identity.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 19ecb40f50)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-08-24 13:01:24 +05:30
Hetvi Thakar 039e0dea33 python3-web3: Fix CVE-2026-40072 
This patch applies the upstream v7 backport for
CVE-2026-40072. The upstream fix commit is referenced in [1],
and the public CVE advisory is referenced in [2].

[1] https://github.com/ApeWorX/web3.py/commit/d62e67d3b636bd4c5a929696c0f5c4167c31625b
[2] https://github.com/advisories/GHSA-5hr4-253g-cpx2

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-08-24 12:58:54 +05:30
Leon Anavi f5dea53141 python3-web3: Upgrade 7.12.0 -> 7.12.1 
Upgrade to release 7.12.1:

- Fix AutoProvider batching setup by adding a proxy batch request.
- Update integrations tests to use geth v1.16.0.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2025-07-15 12:01:07 -07:00