mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-01 16:10:25 +00:00
Hetvi Thakar
8519105eec
This patch applies the upstream 2.13.0 backport for CVE-2026-48526. The upstream fix commit is referenced in [1], and the public CVE advisory is referenced in [2]. [1] https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81 [2] https://github.com/advisories/GHSA-xgmm-8j9v-c9wx Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
29 lines
829 B
BlitzBasic
29 lines
829 B
BlitzBasic
SUMMARY = "JSON Web Token implementation in Python"
|
|
DESCRIPTION = "A Python implementation of JSON Web Token draft 32.\
|
|
Original implementation was written by https://github.com/progrium"
|
|
HOMEPAGE = "https://github.com/jpadilla/pyjwt"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551"
|
|
|
|
SRC_URI += "file://CVE-2026-48522.patch \
|
|
file://CVE-2026-48523.patch \
|
|
file://CVE-2026-48524.patch \
|
|
file://CVE-2026-48525.patch \
|
|
file://CVE-2026-48526.patch \
|
|
"
|
|
|
|
SRC_URI[sha256sum] = "c74a7a2adf861c04d002db713dd85f84beb242228e671280bf709d765b03672b"
|
|
|
|
PYPI_PACKAGE = "pyjwt"
|
|
CVE_PRODUCT = "pyjwt"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
RDEPENDS:${PN} = "\
|
|
python3-cryptography \
|
|
python3-json \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
|