From 2aa82f4b3376cb6946d054bfc674dfa711c112f1 Mon Sep 17 00:00:00 2001 From: Devansh Patel Date: Wed, 26 Aug 2026 00:53:47 -0700 Subject: [PATCH] python3-twisted: correct CVE_PRODUCT mapping The product-only "twisted" value emits a wildcard-vendor identity instead of the active identity assigned to the packaged Twisted source. Use "twisted:twisted" for its NVD dictionary CPE, NVD configuration, and CNA affected-data identities. With sbom-cve-check 1.3.3 and the pinned database snapshots, the generated product identity changes; the current CVE report is unchanged. Signed-off-by: Devansh Patel Signed-off-by: Khem Raj --- meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb b/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb index 7d7f5d3053..c294bd2933 100644 --- a/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb +++ b/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=ff950f7bafa004a86f478dc9eaf8106f" SRC_URI[sha256sum] = "dbfd0fe1ee409d0243fdd7a6a6ff14f4948cec1fd78e0376291f805e1501fae9" -CVE_PRODUCT = "twisted" +CVE_PRODUCT = "twisted:twisted" inherit pypi python_hatchling