mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-08-25 17:32:06 +00:00
Code Issues Projects Releases Wiki Activity

python3-httplib2: correct CVE_PRODUCT mapping

Browse Source 
The current product-only "httplib2" mapping generates a wildcard-vendor
product identity instead of the vendor assigned to the packaged project.

Use "httplib2_project:httplib2" for its exact NVD dictionary CPE and NVD
configuration identity. This changes the generated CPE, but sbom-cve-check
1.3.3 with the pinned NVD database snapshot has no current CVE report delta.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Devansh Patel
2026-08-20 02:37:41 -07:00
committed by Khem Raj
parent 19ecb40f50
commit 0a8f71a643
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-httplib2_0.32.0.bb
+1 -1
View File
@@ -16,4 +16,4 @@ RDEPENDS:${PN} += "\
python3-pyparsing \
"
CVE_PRODUCT = "httplib2"
CVE_PRODUCT = "httplib2_project:httplib2"