mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-08 18:30:16 +00:00
Devansh Patel
c0f1ddc31d
The inherited "python:cbor2" mapping does not identify the packaged
source. Use "agronholm:cbor2", its NVD dictionary CPE and NVD
configuration identity, restoring the source-aligned records.
Backport note: master replaces a product-only mapping in version 6.1.4;
Scarthgap 5.6.4 has no recipe-local override, so this is an addition.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 7f59d247ee)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
45 lines
1.2 KiB
BlitzBasic
45 lines
1.2 KiB
BlitzBasic
DESCRIPTION = "An implementation of RFC 7049 - Concise Binary Object Representation (CBOR)."
|
|
DEPENDS +="python3-setuptools-scm-native"
|
|
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8"
|
|
|
|
SRC_URI[sha256sum] = "1c533c50dde86bef1c6950602054a0ffa3c376e8b0e20c7b8f5b108793f6983e"
|
|
|
|
inherit pypi python_setuptools_build_meta ptest
|
|
|
|
DEPENDS += "python3-setuptools-scm-native"
|
|
|
|
SRC_URI += " \
|
|
file://run-ptest \
|
|
file://CVE-2025-64076.patch \
|
|
file://CVE-2025-68131.patch \
|
|
file://CVE-2026-26209-pre1.patch \
|
|
file://CVE-2026-26209.patch \
|
|
file://CVE-2026-26209_p1.patch \
|
|
file://CVE-2026-26209_p2.patch \
|
|
file://CVE-2026-26209-dependent.patch \
|
|
file://CVE-2026-26209_p3.patch \
|
|
file://CVE-2026-26209_p4.patch \
|
|
"
|
|
|
|
RDEPENDS:${PN}-ptest += " \
|
|
python3-hypothesis \
|
|
python3-pytest \
|
|
python3-unittest-automake-output \
|
|
python3-unixadmin \
|
|
"
|
|
|
|
do_install_ptest() {
|
|
install -d ${D}${PTEST_PATH}/tests
|
|
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
|
|
}
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-datetime \
|
|
"
|
|
|
|
CVE_PRODUCT = "agronholm:cbor2"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|