mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-01 16:10:25 +00:00
Devansh Patel
6cbb85db1a
The current "flask" mapping emits the wildcard-vendor *:flask CPE instead of the exact NVD identity for the packaged pallets/flask source. Use "palletsprojects:flask", which is both an NVD dictionary CPE and an NVD configuration identity. CNA affected data uses "pallets:flask" and "The Pallets Project:Flask", which remain covered by scanner aliases. With sbom-cve-check 1.3.3 and the pinned 2026-08-12 data, the generated identity changes but the current CVE report does not. Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
29 lines
788 B
BlitzBasic
29 lines
788 B
BlitzBasic
SUMMARY = "A microframework based on Werkzeug, Jinja2 and good intentions"
|
|
DESCRIPTION = "\
|
|
Flask is a microframework for Python based on Werkzeug, Jinja 2 and good \
|
|
intentions. And before you ask: It is BSD licensed!"
|
|
HOMEPAGE = "https://github.com/pallets/flask"
|
|
LICENSE = "BSD-3-Clause"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=ffeffa59c90c9c4a033c7574f8f3fb75"
|
|
|
|
SRC_URI[sha256sum] = "0ef0e52b8a9cd932855379197dd8f94047b359ca0a78695144304cb45f87c9eb"
|
|
|
|
CVE_PRODUCT = "palletsprojects:flask"
|
|
|
|
inherit pypi python_flit_core ptest-python-pytest
|
|
|
|
CLEANBROKEN = "1"
|
|
|
|
RDEPENDS:${PN} = " \
|
|
python3-blinker \
|
|
python3-click \
|
|
python3-importlib-metadata \
|
|
python3-itsdangerous \
|
|
python3-jinja2 \
|
|
python3-werkzeug \
|
|
"
|
|
|
|
RDEPENDS:${PN}-ptest += "\
|
|
python3-asgiref \
|
|
"
|