Gyorgy Sarvari 891e25f9bf
python3-cbor2: patch CVE-2025-68131
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68131

The NVD report mentions a PR as the solution, however
in the discussion of that PR it turned out that this
is incorrect, and another patch is the solution. That
patch was picked.

Ptests passed successfully.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-19 08:20:16 +05:30

20 lines
585 B
BlitzBasic

DESCRIPTION = "An implementation of RFC 7049 - Concise Binary Object Representation (CBOR)."
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8"
DEPENDS += "python3-setuptools-scm-native"
SRC_URI += "file://CVE-2025-68131.patch"
SRC_URI[sha256sum] = "7a405a1d7c8230ee9acf240aad48ae947ef584e8af05f169f3c1bde8f01f8b71"
inherit pypi python_setuptools_build_meta ptest-python-pytest
RDEPENDS:${PN}-ptest += " \
python3-hypothesis \
python3-unixadmin \
"
RDEPENDS:${PN} += " \
python3-datetime \
"
BBCLASSEXTEND = "native nativesdk"