mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-31 09:17:43 +00:00
mark.yang
a9bfe001bd
The pypi class default python:h11 doesn't match how h11 is tracked in the CVE databases. NVD has no CPE for it yet; the only existing record (CVE-2025-43859) carries python-hyper:h11 in its CNA affected entry [1], so set that pair. CVE-2025-43859 (request smuggling) is fixed in 0.16.0, the version we ship, so it resolves as not affected. [1] https://www.cve.org/CVERecord?id=CVE-2025-43859 Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
13 lines
401 B
BlitzBasic
13 lines
401 B
BlitzBasic
SUMMARY = "A pure-Python, bring-your-own-I/O implementation of HTTP/1.1"
|
|
HOMEPAGE = "https://github.com/python-hyper/h11"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=f5501d19c3116f4aaeef89369f458693"
|
|
|
|
inherit pypi setuptools3
|
|
|
|
SRC_URI[sha256sum] = "4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1"
|
|
|
|
CVE_PRODUCT = "python-hyper:h11"
|
|
|
|
RDEPENDS:${PN} += "python3-profile"
|