mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-04-19 07:46:27 +00:00
3b6292cfbe
Backport the commit[1] from version 6.5.5 which fixes this vulnerability
according to the NVD[2].
[1] 24a2d96ea1
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-35536
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
48 lines
1.5 KiB
BlitzBasic
48 lines
1.5 KiB
BlitzBasic
SUMMARY = "Tornado is an open source version of the scalable, non-blocking web server and tools that power FriendFeed."
|
|
DESCRIPTION = "Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. \
|
|
By using non-blocking network I/O, Tornado can scale to tens of thousands of open connections, making it ideal for long \
|
|
polling, WebSockets, and other applications that require a long-lived connection to each user."
|
|
HOMEPAGE = "http://www.tornadoweb.org/en/stable/"
|
|
LICENSE = "Apache-2.0"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
|
|
|
|
SRC_URI[sha256sum] = "92bad5b4746e9879fd7bf1eb21dce4e3fc5128d71601f80005afa39237ad620b"
|
|
|
|
SRC_URI += "file://CVE-2025-47287.patch \
|
|
file://CVE-2025-67724.patch \
|
|
file://CVE-2025-67726.patch \
|
|
file://CVE-2026-35536.patch \
|
|
"
|
|
|
|
inherit pypi python_setuptools_build_meta
|
|
|
|
# Requires _compression which is currently located in misc
|
|
RDEPENDS:${PN} += " \
|
|
python3-asyncio \
|
|
python3-certifi \
|
|
python3-compression \
|
|
python3-ctypes \
|
|
python3-email \
|
|
python3-html \
|
|
python3-json \
|
|
python3-misc \
|
|
python3-multiprocessing \
|
|
python3-numbers \
|
|
python3-pkgutil \
|
|
python3-pycurl \
|
|
python3-threading \
|
|
python3-unittest \
|
|
"
|
|
|
|
RDEPENDS:${PN}-test += "python3-unittest"
|
|
|
|
PACKAGES =+ "\
|
|
${PN}-test \
|
|
"
|
|
|
|
FILES:${PN}-test = " \
|
|
${PYTHON_SITEPACKAGES_DIR}/*/test \
|
|
"
|
|
|
|
BBCLASSEXTEND += "native nativesdk"
|