From b7266597bc179db6b258368519afe1eedeada5da Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 6 Jul 2026 12:03:01 +0200 Subject: [PATCH] package/python-web2py: fix CPE_ID_VERSION Remove the prepended 'v' coming from the git version to correctly match with vulnerability such as [1]. [1] https://nvd.nist.gov/vuln/detail/CVE-2023-45158 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain --- package/python-web2py/python-web2py.mk | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/package/python-web2py/python-web2py.mk b/package/python-web2py/python-web2py.mk index 5b473698a6..68847a2385 100644 --- a/package/python-web2py/python-web2py.mk +++ b/package/python-web2py/python-web2py.mk @@ -4,7 +4,8 @@ # ################################################################################ -PYTHON_WEB2PY_VERSION = v3.1.1 +PYTHON_WEB2PY_VERSION_UPSTREAM = 3.1.1 +PYTHON_WEB2PY_VERSION = v$(PYTHON_WEB2PY_VERSION_UPSTREAM) PYTHON_WEB2PY_SITE = https://github.com/web2py/web2py.git PYTHON_WEB2PY_SITE_METHOD = git PYTHON_WEB2PY_GIT_SUBMODULES = YES @@ -12,6 +13,7 @@ PYTHON_WEB2PY_LICENSE = LGPL-3.0 PYTHON_WEB2PY_LICENSE_FILES = LICENSE.web2py.txt PYTHON_WEB2PY_CPE_ID_VENDOR = web2py PYTHON_WEB2PY_CPE_ID_PRODUCT = web2py +PYTHON_WEB2PY_CPE_ID_VERSION = $(PYTHON_WEB2PY_VERSION_UPSTREAM) PYTHON_WEB2PY_DEPENDENCIES = host-python3 python3 \ host-python-pydal host-python-yatl