Details: https://nvd.nist.gov/vuln/detail/CVE-2020-28463

According to Debian[1] it has been fixed since version 3.5.55[2]
Mark is as patched.

[1]: https://security-tracker.debian.org/tracker/CVE-2020-28463
[2]: https://hg.reportlab.com/hg-public/reportlab/rev/7f2231703dc7

Signed-off-by: Gyorgy Sarvari <[email protected]>
---
 meta-python/recipes-devtools/python/python3-reportlab_4.4.5.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-python/recipes-devtools/python/python3-reportlab_4.4.5.bb 
b/meta-python/recipes-devtools/python/python3-reportlab_4.4.5.bb
index 3ea47e355b..6386f5c3b1 100644
--- a/meta-python/recipes-devtools/python/python3-reportlab_4.4.5.bb
+++ b/meta-python/recipes-devtools/python/python3-reportlab_4.4.5.bb
@@ -7,6 +7,7 @@ LIC_FILES_CHKSUM = 
"file://LICENSE;md5=cf24392f451ff6710fca1e96cefa0424"
 SRC_URI[sha256sum] = 
"0457d642aa76df7b36b0235349904c58d8f9c606a872456ed04436aafadc1510"
 
 CVE_PRODUCT = "reportlab"
+CVE_STATUS[CVE-2020-28463] = "fixed-version: has been fixed since 3.5.55"
 inherit pypi python_setuptools_build_meta
 
 BBCLASSEXTEND = "native nativesdk"
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#123303): 
https://lists.openembedded.org/g/openembedded-devel/message/123303
Mute This Topic: https://lists.openembedded.org/mt/117175367/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to