Gyorgy Sarvari b964b9858b
python3-configobj: ignore CVE-2023-26112
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-26112

The used version (5.0.9) contains the fix[1] already - ignore the CVE.

[1]: 7c618b0bba

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-01-06 18:07:58 +05:30

18 lines
521 B
BlitzBasic

SUMMARY = "Config file reading, writing and validation."
SECTION = "devel/python"
LICENSE = "BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=e2df3cb285297a24cd1097dfe6e96f95"
SRC_URI[sha256sum] = "03c881bbf23aa07bccf1b837005975993c4ab4427ba57f959afdd9d1a2386848"
inherit pypi python_setuptools_build_meta ptest-python-pytest
PTEST_PYTEST_DIR = "src/tests"
RDEPENDS:${PN} += " \
python3-pprint \
python3-six \
"
CVE_STATUS[CVE-2023-26112] = "fixed-version: the recipe version (5.0.9) contains the fix already"