mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-02 16:30:22 +00:00
Devansh Patel
ecbab436e2
The current inherited "python:web3" mapping does not match the web3.py identities used by NVD and CVE List V5, so its source-aligned CVE is missed.
Use "ethereum:web3.py" for the CNA affected-data identity and "apeworx:web3.py" for the NVD dictionary CPE and configuration identity.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 19ecb40f50)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
30 lines
797 B
BlitzBasic
30 lines
797 B
BlitzBasic
SUMMARY = "A Python library for interacting with Ethereum."
|
|
HOMEPAGE = "https://github.com/ethereum/web3.py"
|
|
SECTION = "devel/python"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=1d34d9701a1461e4bd71a904ac4cf7be"
|
|
|
|
SRC_URI += "file://CVE-2026-40072.patch"
|
|
SRC_URI[sha256sum] = "97f6a116ccaeb5907bb4cb6c771cc23bc942bf09528a840189e9b509b7b8347c"
|
|
|
|
CVE_PRODUCT = "ethereum:web3.py apeworx:web3.py"
|
|
|
|
inherit pypi setuptools3
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-aiohttp \
|
|
python3-eth-abi \
|
|
python3-eth-account \
|
|
python3-eth-hash \
|
|
python3-eth-typing \
|
|
python3-eth-utils \
|
|
python3-hexbytes \
|
|
python3-jsonschema \
|
|
python3-protobuf \
|
|
python3-pydantic \
|
|
python3-requests \
|
|
python3-typing-extensions \
|
|
python3-websockets \
|
|
python3-pyunormalize \
|
|
"
|