mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-08 18:30:16 +00:00
Hetvi Thakar
016908224f
This patch applies the v7 upstream fix for CVE-2026-40072 shown in [1]. The security advisory [2] references the patch-equivalent v8/main fix [3]. The v7 commit was selected because it is the nearest source baseline to Scarthgap's web3.py 6.17.0 recipe. [1] https://github.com/ApeWorX/web3.py/commit/d62e67d3b636bd4c5a929696c0f5c4167c31625b [2] https://github.com/ApeWorX/web3.py/security/advisories/GHSA-5hr4-253g-cpx2 [3] https://github.com/ApeWorX/web3.py/commit/b1c57bb0a124359c9902daaefab4d8af7c3c4c1e Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
28 lines
747 B
BlitzBasic
28 lines
747 B
BlitzBasic
SUMMARY = "A Python library for interacting with Ethereum."
|
|
HOMEPAGE = "https://github.com/ethereum/web3.py"
|
|
SECTION = "devel/python"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=373fede350846fdffd23648fba504635"
|
|
|
|
SRC_URI += "file://CVE-2026-40072.patch"
|
|
SRC_URI[sha256sum] = "1b535272a40da3d8d2b120856edb53b84b0c08bcc8fe1a5bbd5f816fd72f4ec6"
|
|
|
|
inherit pypi setuptools3
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-aiohttp \
|
|
python3-eth-abi \
|
|
python3-eth-account \
|
|
python3-eth-hash \
|
|
python3-eth-typing \
|
|
python3-eth-utils \
|
|
python3-hexbytes \
|
|
python3-jsonschema \
|
|
python3-protobuf \
|
|
python3-pydantic \
|
|
python3-requests \
|
|
python3-typing-extensions \
|
|
python3-websockets \
|
|
python3-pyunormalize \
|
|
"
|