On Thu, Mar 21, 2024 at 17:10 +0000, Ross Burton wrote:
> I can only find two CVEs with the CPE pytest:py and either of them are 
> actually related to the pytest package:
> 
> https://nvd.nist.gov/vuln/detail/CVE-2020-29651
> https://nvd.nist.gov/vuln/detail/CVE-2022-42969
> 
> These issues relate to https://github.com/pytest-dev/py which is not pytest.

You are right. This patch should not be pulled.

-- 
Emil Kronborg

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#197457): 
https://lists.openembedded.org/g/openembedded-core/message/197457
Mute This Topic: https://lists.openembedded.org/mt/105047705/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to