From: Tim Orling <[email protected]> Recipe (PV): python3-babel (2.14.0) Before -> After: python:Babel -> pocoo:babel Newly caught CVEs: CVE-2021-42771 (locale .dat deserialization RCE) Status: patched (fixed 2.9.1)
Note: The original commit targeted python3-babel_2.18.0.bb. This is adjusted for Scarthgap, where the recipe version is 2.14.0. AI-Generated: Claude Sonnet 5 Signed-off-by: Tim Orling <[email protected]> Signed-off-by: Richard Purdie <[email protected]> (cherry picked from commit 134175fa92b85e639dc4646d9a88eeaba0fae4d3) Signed-off-by: Devansh Patel <[email protected]> Signed-off-by: Yoann Congal <[email protected]> --- meta/recipes-devtools/python/python3-babel_2.14.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-babel_2.14.0.bb b/meta/recipes-devtools/python/python3-babel_2.14.0.bb index cd40d4222bf..5185fb21f56 100644 --- a/meta/recipes-devtools/python/python3-babel_2.14.0.bb +++ b/meta/recipes-devtools/python/python3-babel_2.14.0.bb @@ -9,6 +9,8 @@ PYPI_PACKAGE = "Babel" inherit pypi setuptools3 +CVE_PRODUCT = "pocoo:babel" + CLEANBROKEN = "1" RDEPENDS:${PN} += " \
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#245273): https://lists.openembedded.org/g/openembedded-core/message/245273 Mute This Topic: https://lists.openembedded.org/mt/121128327/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
