From: Tim Orling <[email protected]> Fix " vs ' in DESCRIPTION
Recipe (PV): python3-click (8.4.2) Before -> After python:click -> palletsprojects:click Newly caught: CVE-2026-7246 (command injection in click.edit()) Status: patched (fixed 8.3.3) AI-Generated: Claude Sonnet 5 Signed-off-by: Tim Orling <[email protected]> --- meta/recipes-devtools/python/python3-click_8.4.2.bb | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/python/python3-click_8.4.2.bb b/meta/recipes-devtools/python/python3-click_8.4.2.bb index b13bdc9285..0578a0421e 100644 --- a/meta/recipes-devtools/python/python3-click_8.4.2.bb +++ b/meta/recipes-devtools/python/python3-click_8.4.2.bb @@ -1,8 +1,8 @@ SUMMARY = "A simple wrapper around optparse for powerful command line utilities." DESCRIPTION = "\ Click is a Python package for creating beautiful command line interfaces \ -in a composable way with as little code as necessary. It's the "Command \ -Line Interface Creation Kit". It's highly configurable but comes with \ +in a composable way with as little code as necessary. It is the 'Command \ +Line Interface Creation Kit'. It is highly configurable but comes with \ sensible defaults out of the box." HOMEPAGE = "http://click.pocoo.org/"; LICENSE = "BSD-3-Clause" @@ -13,6 +13,8 @@ SRC_URI[sha256sum] = "9a6cea6e60b17ebe0a44c5cc636d94f09bd66142c1cd7d8b4cd731c491 inherit pypi python_flit_core ptest-python-pytest +CVE_PRODUCT = "palletsprojects:click" + RDEPENDS:${PN}-ptest += " \ python3-pytest \ python3-terminal \ -- 2.47.3
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243086): https://lists.openembedded.org/g/openembedded-core/message/243086 Mute This Topic: https://lists.openembedded.org/mt/120677564/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
