meta-openembedded/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb
Gyorgy Sarvari 97363a7b77
python3-marshmallow: set CVE_PRODUCT
The default python:marshmallow CPE doesn't match the CVEs related to this
product, as they are tracked with marshmallow_project:marshmallow CPE.

See CVE db query:
sqlite> select * from products where PRODUCT like 'marshmallow';
CVE-2018-17175|marshmallow_project|marshmallow|||2.15.1|<
CVE-2018-17175|marshmallow_project|marshmallow|3.0|>=|3.0.0b9|<

Set the CVE_PRODUCT so it matches related CVEs.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-12-31 08:28:55 -08:00

35 lines
1.0 KiB
BlitzBasic

SUMMARY = "Simplified object serialization in python"
DESCRIPTION = "Marshmallow is an ORM/ODM/framework-agnostic library for converting complex datatypes, such as objects, to and from native Python datatypes."
HOMEPAGE = "https://github.com/marshmallow-code/marshmallow"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "\
file://LICENSE;md5=27586b20700d7544c06933afe56f7df4 \
file://docs/license.rst;md5=13da439ad060419fb7cf364523017cfb"
SRC_URI[sha256sum] = "083f250643d2e75fd363f256aeb6b1af369a7513ad37647ce4a601f6966e3ba5"
CVE_PRODUCT = "marshmallow"
inherit python_flit_core pypi ptest-python-pytest
RDEPENDS:${PN}-ptest += " \
python3-pytz \
python3-simplejson \
python3-zoneinfo \
python3-tzdata \
"
do_install_ptest:append () {
rm -rf ${D}${PTEST_PATH}/tests/mypy_test_cases
}
RDEPENDS:${PN} += " \
python3-compression \
python3-datetime \
python3-email \
python3-json \
python3-numbers \
python3-pprint \
python3-packaging \
"