From 6442bc09d72ac9b9c657d47043adac79722a60f6 Mon Sep 17 00:00:00 2001 From: Devansh Patel Date: Wed, 23 Sep 2026 22:40:45 +1200 Subject: [PATCH] python3-twisted: correct CVE_PRODUCT mapping The product-only "twisted" value emits a wildcard-vendor identity instead of the active identity assigned to the packaged Twisted source. Use "twisted:twisted" for its NVD dictionary CPE, NVD configuration, and CNA affected-data identities. With sbom-cve-check 1.3.3 and the pinned database snapshots, the generated product identity changes; the current CVE report is unchanged. Signed-off-by: Devansh Patel Signed-off-by: Khem Raj (cherry picked from commit 2aa82f4b3376cb6946d054bfc674dfa711c112f1) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-python/recipes-devtools/python/python3-twisted_25.5.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-python/recipes-devtools/python/python3-twisted_25.5.0.bb b/meta-python/recipes-devtools/python/python3-twisted_25.5.0.bb index 3b49f56093..9b40191964 100644 --- a/meta-python/recipes-devtools/python/python3-twisted_25.5.0.bb +++ b/meta-python/recipes-devtools/python/python3-twisted_25.5.0.bb @@ -16,7 +16,7 @@ SRC_URI += "file://CVE-2026-42304_p1.patch \ SRC_URI[sha256sum] = "1deb272358cb6be1e3e8fc6f9c8b36f78eb0fa7c2233d2dbe11ec6fee04ea316" -CVE_PRODUCT = "twisted" +CVE_PRODUCT = "twisted:twisted" inherit pypi python_hatchling