Files
meta-openembedded/meta-python/recipes-devtools/python/python3-configobj_5.0.9.bb
Gyorgy Sarvari cbb4f9d4e0 python3-configobj: ignore CVE-2023-26112
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-26112

The fix[1] is already included in the recipe version (5.0.9),
the CVE can be marked as patched.

[1]: 7c618b0bba

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00

20 lines
541 B
BlitzBasic

SUMMARY = "Config file reading, writing and validation."
SECTION = "devel/python"
LICENSE = "BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=e2df3cb285297a24cd1097dfe6e96f95"
SRC_URI[sha256sum] = "03c881bbf23aa07bccf1b837005975993c4ab4427ba57f959afdd9d1a2386848"
CVE_PRODUCT = "configobj"
inherit pypi python_setuptools_build_meta ptest-python-pytest
PTEST_PYTEST_DIR = "src/tests"
RDEPENDS:${PN} += " \
python3-pprint \
python3-six \
"
CVE_STATUS[CVE-2023-26112] = "fixed-version: the current version (5.0.9) is already fixed"