mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-07-08 01:37:36 +00:00
Code Issues Projects Releases Wiki Activity
36,643 Commits 64 Branches 0 Tags
bbef3812baa5d9e9b098df0dfacefb3412baf394
Commit Graph

4 Commits

Author SHA1 Message Date
Gyorgy Sarvari 15ab75e8fb python3-flask-cors: set CVE_PRODUCT 
The related CVEs are tracked under multiple vendor IDs (but none
of them are associated with the default "python" vendor).

Query from CVE db:
sqlite> select * from products where product like 'flask-cors';
CVE-2020-25032|flask-cors_project|flask-cors|||3.0.9|<
CVE-2024-1681|corydolphin|flask-cors|4.0.0|=||
CVE-2024-6221|corydolphin|flask-cors|4.0.1|=||
CVE-2024-6839|flask-cors_project|flask-cors|4.0.1|=||
CVE-2024-6844|flask-cors_project|flask-cors|4.0.1|=||
CVE-2024-6866|flask-cors_project|flask-cors|4.0.1|=||

Set the CVE_PRODUCT so it matches the relevant entries.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2025-12-31 08:33:59 -08:00
Derek Straka c089690f57 python3-*: Update recipes to correctly check the upstream packages 
With the upstream check migrated to the simple repo API, a number of the
recipes required updates to:
1. Remove outdated UPSTREAM_CHECK_REGEX checks
2. Add recipe specific UPSTREAM_CHECK_PYPI_PACKAGE definitions for
   packages that use '_', CamelCase, or other deviations from PEP625 in
   the source archive

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2024-12-19 09:41:21 -08:00
Soumya Sambu dadb8790bd python3-flask-cors: Fix CVE-2024-6221 
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the
`Access-Control-Allow-Private-Network` CORS header to be set to true
by default, without any configuration option. This behavior can expose
private network resources to unauthorized external access, leading to
significant security risks such as data breaches, unauthorized access
to sensitive information, and potential network intrusions.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6221

Upsteam-Patch:
https://github.com/corydolphin/flask-cors/commit/7ae310c56ac30e0b94fb42129aa377bf633256ec

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2024-09-03 07:05:13 -07:00
Derek Straka 6c29bdf1fd python3-flask-cors: add initial version of the recipe for 4.0.0 
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
 2023-09-30 01:03:17 -07:00