diff mbox series

[meta-python,whinlatter,15/20] python3-uvicorn: mark CVE-2020-7694 patched

Message ID 20260205065955.1267785-15-skandigraun@gmail.com
State New
Headers show
Series [meta-python,whinlatter,01/20] python3-cbor2: patch CVE-2025-68131 | expand

Commit Message

Gyorgy Sarvari Feb. 5, 2026, 6:59 a.m. UTC 
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-7694

The vulnerability was reported to the project[1], and the commit[2] that
resolved the issue has been part of the project since version 0.11.7.

Mark the CVE as patched due to this.

[1]: https://github.com/Kludex/uvicorn/issues/723
[2]: https://github.com/Kludex/uvicorn/commit/895807f94ea9a8e588605c12076b7d7517cda503

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a5ee234b8cf06b6385a9bf1eb5b60d6171a993c9)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb b/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb
index b0ce49be97..ee295abf5d 100644
--- a/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb
+++ b/meta-python/recipes-devtools/python/python3-uvicorn_0.38.0.bb
@@ -11,6 +11,7 @@  SRC_URI += "file://0001-ptest-disable-failing-tests.patch"
 inherit pypi python_hatchling ptest-python-pytest
 
 PYPI_PACKAGE = "uvicorn"
+CVE_STATUS[CVE-2020-7694] = "fixed-version: The vulnerability has been fixed since 0.11.7"
 
 RDEPENDS:${PN} = "\
     python3-click \