mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-27 12:40:19 +00:00
Code Issues Projects Releases Wiki Activity

python3-cbor2: use exact CVE_PRODUCT mapping

Browse Source 
The product-only "cbor2" mapping uses a wildcard vendor. Use
"agronholm:cbor2", its NVD dictionary CPE and NVD configuration
identity for the packaged source.

The generated CPE changes, but Wrynose sbom-cve-check 1.3.1 with its
pinned 2026-05-07 databases has no current CVE report delta. This
backport applies the change to version 5.9.0 rather than 6.1.4.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 7f59d247ee)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Devansh Patel
2026-09-11 08:02:17 +05:30
committed by Anuj Mittal
parent d7e93ab171
commit 5250a6f557
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-cbor2_5.9.0.bb
+1 -1
View File
@@ -15,6 +15,6 @@ RDEPENDS:${PN} += " \
python3-datetime \
"
CVE_PRODUCT = "cbor2"
CVE_PRODUCT = "agronholm:cbor2"
BBCLASSEXTEND = "native nativesdk"