meta-openembedded/meta-python/recipes-devtools/python/python3-cbor2_5.4.2.bb
Gyorgy Sarvari cc53827cc3 python3-cbor2: ignore CVE-2025-64076
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-64076

The vunerability was introduced in v5.6.0[1], the recipe version doesn't
contain the vulnerable piece of code.

[1]: 387755eacf

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2026-01-08 22:03:03 +01:00

33 lines
814 B
BlitzBasic

DESCRIPTION = "An implementation of RFC 7049 - Concise Binary Object Representation (CBOR)."
DEPENDS +="${PYTHON_PN}-setuptools-scm-native"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8"
SRC_URI[sha256sum] = "e283e70b55a049ff364cc5e648fde587e4d9b0e87e4b2664c69e639135e6b3b8"
inherit pypi python_setuptools_build_meta ptest
SRC_URI += " \
file://run-ptest \
"
# not vulnerable yet, vulnerability was introduced in v5.6.0
CVE_CHECK_IGNORE = "CVE-2025-64076"
RDEPENDS:${PN}-ptest += " \
${PYTHON_PN}-pytest \
${PYTHON_PN}-unixadmin \
"
do_install_ptest() {
install -d ${D}${PTEST_PATH}/tests
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
}
RDEPENDS:${PN} += " \
${PYTHON_PN}-datetime \
"
BBCLASSEXTEND = "native nativesdk"