Files
meta-openembedded/meta-python/recipes-devtools/python/python3-web3_7.12.1.bb
T
Hetvi Thakar 039e0dea33 python3-web3: Fix CVE-2026-40072
This patch applies the upstream v7 backport for
CVE-2026-40072. The upstream fix commit is referenced in [1],
and the public CVE advisory is referenced in [2].

[1] https://github.com/ApeWorX/web3.py/commit/d62e67d3b636bd4c5a929696c0f5c4167c31625b
[2] https://github.com/advisories/GHSA-5hr4-253g-cpx2

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-08-24 12:58:54 +05:30

28 lines
747 B
BlitzBasic

SUMMARY = "A Python library for interacting with Ethereum."
HOMEPAGE = "https://github.com/ethereum/web3.py"
SECTION = "devel/python"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=1d34d9701a1461e4bd71a904ac4cf7be"
SRC_URI += "file://CVE-2026-40072.patch"
SRC_URI[sha256sum] = "97f6a116ccaeb5907bb4cb6c771cc23bc942bf09528a840189e9b509b7b8347c"
inherit pypi setuptools3
RDEPENDS:${PN} += " \
python3-aiohttp \
python3-eth-abi \
python3-eth-account \
python3-eth-hash \
python3-eth-typing \
python3-eth-utils \
python3-hexbytes \
python3-jsonschema \
python3-protobuf \
python3-pydantic \
python3-requests \
python3-typing-extensions \
python3-websockets \
python3-pyunormalize \
"