mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
The `pocoo:jinja2` CPE introduced in commit [1] is not deprecated but is
no longer used. All the security issue on the Github Advisory reference
CVE with the `palletsprojects:jinja` CPE instead (see [2]).
This commit updates the CPE accordingly.
[1] 165f60a092 package/python-jinja2: add CPE variables
[2] https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
22 lines
850 B
Makefile
22 lines
850 B
Makefile
################################################################################
|
|
#
|
|
# python-jinja2
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_JINJA2_VERSION = 3.1.6
|
|
PYTHON_JINJA2_SOURCE = jinja2-$(PYTHON_JINJA2_VERSION).tar.gz
|
|
PYTHON_JINJA2_SITE = https://files.pythonhosted.org/packages/df/bf/f7da0350254c0ed7c72f3e33cef02e048281fec7ecec5f032d4aac52226b
|
|
PYTHON_JINJA2_SETUP_TYPE = flit
|
|
PYTHON_JINJA2_LICENSE = BSD-3-Clause
|
|
PYTHON_JINJA2_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_JINJA2_CPE_ID_VENDOR = palletsprojects
|
|
PYTHON_JINJA2_CPE_ID_PRODUCT = jinja
|
|
|
|
# In host/target build, setup.py tries to download markupsafe if it is not installed
|
|
PYTHON_JINJA2_DEPENDENCIES = host-python-markupsafe
|
|
HOST_PYTHON_JINJA2_DEPENDENCIES = host-python-markupsafe
|
|
|
|
$(eval $(python-package))
|
|
$(eval $(host-python-package))
|