From e330e3508db2dabb575d25a85967d7bf72af8a06 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Wed, 7 Jan 2026 10:27:45 +0100 Subject: [PATCH] python3-werkzeug: ignore CVE-2024-49766 and CVE-2025-66221 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-49766 https://nvd.nist.gov/vuln/detail/CVE-2025-66221 Both vulnerabilities affect Windows only - ignore them. Signed-off-by: Gyorgy Sarvari --- meta-python/recipes-devtools/python/python3-werkzeug_2.1.1.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-werkzeug_2.1.1.bb b/meta-python/recipes-devtools/python/python3-werkzeug_2.1.1.bb index 5529686aac..f795da80a3 100644 --- a/meta-python/recipes-devtools/python/python3-werkzeug_2.1.1.bb +++ b/meta-python/recipes-devtools/python/python3-werkzeug_2.1.1.bb @@ -43,3 +43,6 @@ RDEPENDS:${PN} += " \ ${PYTHON_PN}-misc \ ${PYTHON_PN}-profile \ " + +# Windows-only vulnerabilities +CVE_CHECK_IGNORE = "CVE-2024-49766 CVE-2025-66221"