From 91bc2f3f8eff9b8e2599ffbdbfbc9f9e31ab4537 Mon Sep 17 00:00:00 2001 From: Devansh Patel Date: Wed, 23 Sep 2026 22:40:55 +1200 Subject: [PATCH] python3-ujson: add CVE_PRODUCT mapping The current inherited "python:ujson" mapping does not match the UltraJSON identities used by NVD and CVE List V5, so source-aligned CVEs are missed. Use "ultrajson:ultrajson" for the CNA affected-data identity and "ultrajson_project:ultrajson" for the NVD dictionary CPE and configuration identity. Signed-off-by: Devansh Patel Signed-off-by: Khem Raj (cherry picked from commit 7a393253ec09d90c67043201bb0f29e7613930a6) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- meta-python/recipes-devtools/python/python3-ujson_5.12.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-ujson_5.12.1.bb b/meta-python/recipes-devtools/python/python3-ujson_5.12.1.bb index 89311254a8..abcda88c8b 100644 --- a/meta-python/recipes-devtools/python/python3-ujson_5.12.1.bb +++ b/meta-python/recipes-devtools/python/python3-ujson_5.12.1.bb @@ -8,6 +8,8 @@ SRC_URI += "file://CVE-2026-54911.patch" SRC_URI[sha256sum] = "5b7e96406c301a1366534479a7352ec40ec68bb327c0c119091635acd5925e35" +CVE_PRODUCT = "ultrajson:ultrajson ultrajson_project:ultrajson" + inherit pypi ptest-python-pytest python_setuptools_build_meta # let OE do the strip operation