From 43fd2c88f1ab439bd933af2a7bf1c7b0db3e77dd Mon Sep 17 00:00:00 2001 From: Devansh Patel Date: Thu, 20 Aug 2026 03:30:07 -0700 Subject: [PATCH] python3-filelock: set CVE_PRODUCT The inherited python:filelock mapping does not identify the tox-dev source packaged by this recipe, so filelock CVEs are missed. Use tox-dev:filelock to match the source identity used by NVD and CNA. Signed-off-by: Devansh Patel Signed-off-by: Khem Raj --- meta-python/recipes-devtools/python/python3-filelock_3.32.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-filelock_3.32.3.bb b/meta-python/recipes-devtools/python/python3-filelock_3.32.3.bb index 744a1b6aaf..ec9113721b 100644 --- a/meta-python/recipes-devtools/python/python3-filelock_3.32.3.bb +++ b/meta-python/recipes-devtools/python/python3-filelock_3.32.3.bb @@ -5,6 +5,8 @@ HOMEPAGE = "https://py-filelock.readthedocs.io/" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE;md5=2c6acbdf7bb74caa37512c3a5ca6857b" +CVE_PRODUCT = "tox-dev:filelock" + SRC_URI += "file://run-ptest" SRC_URI[sha256sum] = "0ffa185a3540854c95caa7fa76b76cb219d907415e2c5dc9af25fd970563487f"