From 7a393253ec09d90c67043201bb0f29e7613930a6 Mon Sep 17 00:00:00 2001 From: Devansh Patel Date: Mon, 24 Aug 2026 03:50:57 -0700 Subject: [PATCH] python3-ujson: add CVE_PRODUCT mapping The current inherited "python:ujson" mapping does not match the UltraJSON identities used by NVD and CVE List V5, so source-aligned CVEs are missed. Use "ultrajson:ultrajson" for the CNA affected-data identity and "ultrajson_project:ultrajson" for the NVD dictionary CPE and configuration identity. Signed-off-by: Devansh Patel Signed-off-by: Khem Raj --- meta-python/recipes-devtools/python/python3-ujson_5.13.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-ujson_5.13.0.bb b/meta-python/recipes-devtools/python/python3-ujson_5.13.0.bb index d68e1a674e..3a9b581f9a 100644 --- a/meta-python/recipes-devtools/python/python3-ujson_5.13.0.bb +++ b/meta-python/recipes-devtools/python/python3-ujson_5.13.0.bb @@ -6,6 +6,8 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=1e3768cfe2662fa77c49c9c2d3804d87" SRC_URI[sha256sum] = "d62e3d7625384c08082abad81a077af587fdef2761bb14c3822f4234b8d07d75" +CVE_PRODUCT = "ultrajson:ultrajson ultrajson_project:ultrajson" + inherit pypi ptest-python-pytest python_setuptools_build_meta # let OE do the strip operation