diff mbox series

[wrynose,08/40] python3-pycryptodome: fix CVE_PRODUCT

Message ID	0101640bbeb3a093a5b62c230d06752d85836959.1788629392.git.yoann.congal@smile.fr
State	RFC, archived
Delegated to:	Yoann Congal
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.47, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 08/40] python3-pycryptodome: fix CVE_PRODUCT Date: Sat, 5 Sep 2026 22:44:09 +0200 Message-ID: <0101640bbeb3a093a5b62c230d06752d85836959.1788629392.git.yoann.congal@smile.fr> In-Reply-To: <cover.1788629392.git.yoann.congal@smile.fr> References: <cover.1788629392.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/40] apt: mark CVE-2011-3374 as fixed-version \| expand [wrynose,01/40] apt: mark CVE-2011-3374 as fixed-version [wrynose,02/40] expat: set CVE_STATUS for CVE-2026-72522 [wrynose,03/40] python3-git: fix CVE-2026-42284 [wrynose,04/40] python3-git: fix CVE-2026-42215 [wrynose,05/40] python3-git: fix CVE-2026-44243 [wrynose,06/40] python3-git: fix CVE-2026-44244 [wrynose,07/40] python3-babel: fix CVE_PRODUCT [wrynose,08/40] python3-pycryptodome: fix CVE_PRODUCT [wrynose,09/40] python3-dbusmock: fix CVE_PRODUCT [wrynose,10/40] python3-wheel: fix CVE_PRODUCT [wrynose,11/40] python3-click: fix CVE_PRODUCT [wrynose,12/40] python3-attrs: fix CVE_PRODUCT [wrynose,13/40] python3-numpy: fix CVE_PRODUCT [wrynose,14/40] python3-pycryptodomex: fix CVE_PRODUCT [wrynose,15/40] python3-mako: upgrade 1.3.10 -> 1.3.12 [wrynose,16/40] gnutls: fix for CVE-2026-42011 [wrynose,17/40] gnutls: fix CVE-2026-42010 [wrynose,18/40] alsa-lib: patch CVE-2026-56109 [wrynose,19/40] libevent: upgrade 2.1.12 -> 2.1.13 [wrynose,20/40] libevent: set status for CVE-2026-63380 [wrynose,21/40] libxfont2: Fix CVE-2026-56001 [wrynose,22/40] libxfont2: Fix CVE-2026-56002 [wrynose,23/40] libxfont2: Fix CVE-2026-56003 [wrynose,24/40] util-linux: Fix CVE-2026-3184 [wrynose,25/40] python3: upgrade 3.14.6 -> 3.14.7 [wrynose,26/40] volatile-binds: order systemd-timesyncd after /var/lib [wrynose,27/40] go: upgrade 1.26.5 -> 1.26.6 [wrynose,28/40] python3: add missing pyc files to core [wrynose,29/40] python3: fix stringold cache files [wrynose,30/40] python3-git: fix CVE_PRODUCT [wrynose,31/40] binutils: stable 2.46 branch updates [wrynose,32/40] python3-click: upgrade 8.3.1 -> 8.3.3 [wrynose,33/40] python3-idna: Fix CVE-2026-45409 [wrynose,34/40] perl: fix CVE-2026-42496 and CVE-2026-42497 [wrynose,35/40] libssh2: Fix CVE-2026-58051 [wrynose,36/40] python3-cryptography: backport stray file install fix [wrynose,37/40] qemu: guard RESOLVE_CACHED strace flag [wrynose,38/40] util-linux: set status for CVE-2026-13595 [wrynose,39/40] go: upgrade 1.26.6 -> 1.26.7 [wrynose,40/40] scripts/install-buildtools: Update to 6.0.3

Commit Message

Yoann Congal Sept. 5, 2026, 8:44 p.m. UTC

From: Tim Orling <tim.orling@konsulko.com>

With this change, 2 Patched CVEs are properly reported:
* CVE-2018-15560
* CVE-2023-52323

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f8a88010edc6edbb168cbc31aa5df847a328661c)
The current pypi default "python:pycryptodome" is deprecated and does
not match current NVD configuration criteria. Use
"pycryptodome:pycryptodome", the active NVD dictionary CPE and
configuration identity for the packaged source, so two patched CVE
records are reported.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-devtools/python/python3-pycryptodome_3.23.0.bb | 1 +
 1 file changed, 1 insertion(+)

diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-pycryptodome_3.23.0.bb b/meta/recipes-devtools/python/python3-pycryptodome_3.23.0.bb
index 2528162ff8a..1b2a5edd38c 100644
--- a/meta/recipes-devtools/python/python3-pycryptodome_3.23.0.bb
+++ b/meta/recipes-devtools/python/python3-pycryptodome_3.23.0.bb
@@ -3,3 +3,4 @@  inherit python_setuptools_build_meta
 
 SRC_URI[sha256sum] = "447700a657182d60338bab09fdb27518f8856aecd80ae4c6bdddb67ff5da44ef"
 
+CVE_PRODUCT = "pycryptodome:pycryptodome"