mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-08 00:20:38 -09:00
package/python-jinja2: update CPE
The `pocoo:jinja2` CPE introduced in commit [1] is not deprecated but is
no longer used. All the security issue on the Github Advisory reference
CVE with the `palletsprojects:jinja` CPE instead (see [2]).
This commit updates the CPE accordingly.
[1] 165f60a092 package/python-jinja2: add CPE variables
[2] https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
committed by
Julien Olivain
parent
87e2a72e13
commit
c01c53f5e8
@@ -10,8 +10,8 @@ PYTHON_JINJA2_SITE = https://files.pythonhosted.org/packages/df/bf/f7da0350254c0
|
||||
PYTHON_JINJA2_SETUP_TYPE = flit
|
||||
PYTHON_JINJA2_LICENSE = BSD-3-Clause
|
||||
PYTHON_JINJA2_LICENSE_FILES = LICENSE.txt
|
||||
PYTHON_JINJA2_CPE_ID_VENDOR = pocoo
|
||||
PYTHON_JINJA2_CPE_ID_PRODUCT = jinja2
|
||||
PYTHON_JINJA2_CPE_ID_VENDOR = palletsprojects
|
||||
PYTHON_JINJA2_CPE_ID_PRODUCT = jinja
|
||||
|
||||
# In host/target build, setup.py tries to download markupsafe if it is not installed
|
||||
PYTHON_JINJA2_DEPENDENCIES = host-python-markupsafe
|
||||
|
||||
Reference in New Issue
Block a user