Commit Graph

3 Commits

Author SHA1 Message Date
Derek Straka
c089690f57
python3-*: Update recipes to correctly check the upstream packages
With the upstream check migrated to the simple repo API, a number of the
recipes required updates to:
1. Remove outdated UPSTREAM_CHECK_REGEX checks
2. Add recipe specific UPSTREAM_CHECK_PYPI_PACKAGE definitions for
   packages that use '_', CamelCase, or other deviations from PEP625 in
   the source archive

Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 09:41:21 -08:00
Soumya Sambu
dadb8790bd
python3-flask-cors: Fix CVE-2024-6221
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the
`Access-Control-Allow-Private-Network` CORS header to be set to true
by default, without any configuration option. This behavior can expose
private network resources to unauthorized external access, leading to
significant security risks such as data breaches, unauthorized access
to sensitive information, and potential network intrusions.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6221

Upsteam-Patch:
7ae310c56a

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-03 07:05:13 -07:00
Derek Straka
6c29bdf1fd python3-flask-cors: add initial version of the recipe for 4.0.0
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-30 01:03:17 -07:00