57229c22f1
See https://security-tracker.debian.org/tracker/CVE-2018-20225 for the rationale of ignoring this CVE. Things basically work as intended. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
21 lines
768 B
Makefile
21 lines
768 B
Makefile
################################################################################
|
|
#
|
|
# python-pip
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_PIP_VERSION = 22.3.1
|
|
PYTHON_PIP_SOURCE = pip-$(PYTHON_PIP_VERSION).tar.gz
|
|
PYTHON_PIP_SITE = https://files.pythonhosted.org/packages/a3/50/c4d2727b99052780aad92c7297465af5fe6eec2dbae490aa9763273ffdc1
|
|
PYTHON_PIP_SETUP_TYPE = setuptools
|
|
PYTHON_PIP_LICENSE = MIT
|
|
PYTHON_PIP_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_PIP_CPE_ID_VENDOR = pypa
|
|
PYTHON_PIP_CPE_ID_PRODUCT = pip
|
|
# Disputed CVE: things work as designed, and only affects the
|
|
# --extra-index-url option. This CVE will never be fixed.
|
|
PYTHON_PIP_IGNORE_CVES += CVE-2018-20225
|
|
|
|
$(eval $(python-package))
|
|
$(eval $(host-python-package))
|