mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-01 16:10:25 +00:00
Hetvi Thakar
34800488de
This patch applies the upstream fix for CVE-2026-54911 to ujson 5.12.1. The upstream fix commit is referenced in [1], and the public security advisory is referenced in [2]. [1] https://github.com/ultrajson/ultrajson/commit/169eaf36b1116fece5034ee79a7a0ef3f6deedcf [2] https://github.com/ultrajson/ultrajson/security/advisories/GHSA-3j69-69wj-xqx2 Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
30 lines
790 B
BlitzBasic
30 lines
790 B
BlitzBasic
SUMMARY = "Ultra fast JSON encoder and decoder for Python"
|
|
DESCRIPTION = "UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python 2.5+ and 3."
|
|
|
|
LICENSE = "BSD-3-Clause & TCL"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=1e3768cfe2662fa77c49c9c2d3804d87"
|
|
|
|
SRC_URI += "file://CVE-2026-54911.patch"
|
|
|
|
SRC_URI[sha256sum] = "5b7e96406c301a1366534479a7352ec40ec68bb327c0c119091635acd5925e35"
|
|
|
|
inherit pypi ptest-python-pytest python_setuptools_build_meta
|
|
|
|
# let OE do the strip operation
|
|
export UJSON_BUILD_NO_STRIP = "1"
|
|
|
|
DEPENDS += "python3-setuptools-scm-native"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-datetime \
|
|
python3-numbers \
|
|
"
|
|
|
|
RDEPENDS:${PN}-ptest += " \
|
|
python3-json \
|
|
python3-misc \
|
|
python3-pytz \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|