The relevant CVEs are tracked with pikepdf_project:pikepdf CPE, and the default python:pikepdf doesn't match CVEs. Set CVE_PRODUCT accordingly.
See CVE db query: sqlite> select * from products where product like 'pikepdf'; CVE-2021-29421|pikepdf_project|pikepdf|1.3.0|>=|2.9.2|<= Signed-off-by: Gyorgy Sarvari <[email protected]> --- meta-python/recipes-devtools/python/python3-pikepdf_10.0.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-pikepdf_10.0.3.bb b/meta-python/recipes-devtools/python/python3-pikepdf_10.0.3.bb index f047969033..28983417f0 100644 --- a/meta-python/recipes-devtools/python/python3-pikepdf_10.0.3.bb +++ b/meta-python/recipes-devtools/python/python3-pikepdf_10.0.3.bb @@ -9,6 +9,8 @@ inherit pypi python_setuptools_build_meta PYPI_PACKAGE = "pikepdf" +CVE_PRODUCT = "pikepdf" + DEPENDS += " \ python3-pybind11-native \ qpdf \
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#123051): https://lists.openembedded.org/g/openembedded-devel/message/123051 Mute This Topic: https://lists.openembedded.org/mt/117009251/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
