meta-virtualization/recipes-devtools
Bin Cao e1beca39e8 python3-dotenv: Fix CVE-2026-28684
Backported from [1], verified with the test script from [2].

[1] 790c5c0299
[2] https://github.com/theskumar/python-dotenv/security/advisories/GHSA-mf9w-mj56-hr94
[3] https://nvd.nist.gov/vuln/detail/CVE-2026-28684

Signed-off-by: Bin Cao <bin.cao.cn@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2026-04-29 20:01:23 +00:00
..
go go-distribution: Add CVE_PRODUCT to align with NVD CPE 2026-04-21 13:11:11 +00:00
go-dirhash-native devtools: add go-dirhash-native for Go module hash calculation 2025-12-08 20:57:44 -05:00
python python3-dotenv: Fix CVE-2026-28684 2026-04-29 20:01:23 +00:00
qemu layer.conf/qemu-system-native: Improve native DISTRO_FEATURE handling 2026-04-28 11:27:58 +00:00
yq yq: fix do_compile failure caused by CGO_ENABLED="0" 2026-04-09 13:51:26 +00:00