mirrors/poky
1
0 Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-10-15 17:07:16 +00:00
Code Issues Projects Releases Wiki Activity

python3-mako: correct CVE_PRODUCT mapping

Browse Source 
The inherited "python:Mako" mapping is not used for the packaged Mako
source and causes its vulnerability records to be missed.

Use "makotemplates:mako" for its historical NVD configuration identity
and "sqlalchemy:mako" for the current NVD dictionary CPE, NVD
configuration, and CNA affected-data identity.

Backport note: this applies the metadata to Scarthgap Mako 1.3.2 rather
than master 1.4.1; the older release exposes applicable unpatched records.

(From OE-Core rev: d419d38614ad7dae149e005ac6183c0290f54b2d)

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 76fc2046d3f251af34dd04f8fdcfc0c1d6016380)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Devansh Patel authored and Paul Barker committed 2026-09-28 10:17:42 +01:00
1 parent 456fd03409
commit bf5c46b3f8
1 file changed
+2
Download Patch File Download Diff File Expand all files Collapse all files
meta/recipes-devtools/python/python3-mako_1.3.2.bb
+2
View File
@@ -12,6 +12,8 @@ SRC_URI += "file://CVE-2026-41205.patch \
"
SRC_URI[sha256sum] = "2a0c8ad7f6274271b3bb7467dd37cf9cc6dab4bc19cb69a4ef10669402de698e"
CVE_PRODUCT = "makotemplates:mako sqlalchemy:mako"
RDEPENDS:${PN} = "python3-html \
python3-markupsafe \
python3-netclient \