mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-09 06:40:17 +00:00
Darsh Kelaiya
8ee24af3c6
This patch applies the upstream fix as referenced in [2], using the commit shown in [1]. [1] https://github.com/django/django/commit/ba80833fa656dd09660b97c4429331067db1b080 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-15830 Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
22 lines
715 B
BlitzBasic
22 lines
715 B
BlitzBasic
require python-django.inc
|
|
inherit setuptools3
|
|
|
|
# Windows-specific DoS via NFKC normalization, not applicable to Linux
|
|
CVE_STATUS[CVE-2025-27556] = "not-applicable-platform: Issue only applies on Windows"
|
|
|
|
SRC_URI += "file://CVE-2025-64460.patch \
|
|
file://CVE-2025-64459-1.patch \
|
|
file://CVE-2025-64459-2.patch \
|
|
file://CVE-2025-57833.patch \
|
|
file://CVE-2025-59681.patch \
|
|
file://CVE-2026-15307.patch \
|
|
file://CVE-2026-15337.patch \
|
|
file://CVE-2026-15830.patch \
|
|
"
|
|
SRC_URI[sha256sum] = "29019a5763dbd48da1720d687c3522ef40d1c61be6fb2fad27ed79e9f655bc11"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-sqlparse \
|
|
python3-asgiref \
|
|
"
|