mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-01 16:10:25 +00:00
Darsh Kelaiya
22f7bc5b39
This patch applies the upstream fix as referenced in [2], using the commit shown in [1]. [1] https://github.com/aio-libs/aiohttp/commit/0ca2b6c28a25726527a8b60f25960262a91ed0e0 [2] https://github.com/advisories/GHSA-4m7w-qmgq-4wj5 Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
46 lines
1.3 KiB
BlitzBasic
46 lines
1.3 KiB
BlitzBasic
SUMMARY = "Async http client/server framework"
|
|
DESCRIPTION = "Asynchronous HTTP client/server framework for asyncio and Python"
|
|
HOMEPAGE = "https://github.com/aio-libs/aiohttp"
|
|
LICENSE = "Apache-2.0"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=748073912af33aa59430d3702aa32d41"
|
|
|
|
SRC_URI[sha256sum] = "9d98cc980ecc96be6eb4c1994ce35d28d8b1f5e5208a23b421187d1209dbb7d1"
|
|
|
|
SRC_URI += " \
|
|
file://CVE-2026-34993.patch \
|
|
file://CVE-2026-47265.patch \
|
|
file://CVE-2026-50269.patch \
|
|
file://CVE-2026-54274.patch \
|
|
file://CVE-2026-54275.patch \
|
|
"
|
|
|
|
CVE_PRODUCT = "aiohttp"
|
|
CVE_STATUS_GROUPS = "CVE_AIOHTTP_FIX_3_13_4"
|
|
CVE_AIOHTTP_FIX_3_13_4[status] = "fixed-version: fixed in 3.13.4"
|
|
CVE_AIOHTTP_FIX_3_13_4 = "CVE-2026-22815 CVE-2026-34513 CVE-2026-34514 \
|
|
CVE-2026-34515 CVE-2026-34516 CVE-2026-34517 CVE-2026-34518 CVE-2026-34519 \
|
|
CVE-2026-34520 CVE-2026-34525"
|
|
|
|
inherit python_setuptools_build_meta pypi
|
|
|
|
DEPENDS = "python3-pkgconfig-native"
|
|
|
|
PACKAGECONFIG ??= ""
|
|
PACKAGECONFIG[extras] = ",,,python3-aiodns python3-brotli"
|
|
|
|
RDEPENDS:${PN} = "\
|
|
python3-aiohappyeyeballs \
|
|
python3-aiosignal \
|
|
python3-async-timeout \
|
|
python3-attrs \
|
|
python3-frozenlist \
|
|
python3-misc \
|
|
python3-multidict \
|
|
python3-propcache \
|
|
python3-yarl \
|
|
"
|
|
|
|
CFLAGS:append:toolchain-gcc:arm = " -flax-vector-conversions"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|