mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-09 18:50:13 +00:00
This patch applies the reviewed upstream fix shown in [1]. The advisory identifying the fix is referenced in [2]. [1] https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-22701 Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
21 lines
688 B
BlitzBasic
21 lines
688 B
BlitzBasic
# SPDX-License-Identifier: MIT
|
|
# Copyright (C) 2023 iris-GmbH infrared & intelligent sensors
|
|
|
|
SUMMARY = "A single module, which implements a platform independent file lock in Python, which provides a simple way of inter-process communication"
|
|
HOMEPAGE = "https://py-filelock.readthedocs.io/"
|
|
LICENSE = "Unlicense"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=911690f51af322440237a253d695d19f"
|
|
|
|
SRC_URI[sha256sum] = "d13f466618bfde72bd2c18255e269f72542c6e70e7bac83a0232d6b1cc5c8cf4"
|
|
|
|
SRC_URI += "file://CVE-2025-68146.patch \
|
|
file://CVE-2026-22701.patch \
|
|
"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
inherit pypi python_hatchling
|
|
|
|
DEPENDS += "\
|
|
python3-hatch-vcs-native \
|
|
"
|