mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-08-25 05:21:31 +00:00
Code Issues Projects Releases Wiki Activity

python3-m2crypto: correct CVE_PRODUCT mapping

Browse Source 
The current product-only "m2crypto" mapping generates a wildcard-vendor
identity instead of the two vendors used for the packaged source.

Use "heikkitoivonen:m2crypto" and "m2crypto_project:m2crypto" for their
exact NVD dictionary CPE and NVD configuration identities. This changes
the generated CPE set, but sbom-cve-check 1.3.3 with the pinned NVD
snapshot has no current CVE report delta.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Devansh Patel
2026-08-21 05:59:45 -07:00
committed by Khem Raj
parent 26fa8b053b
commit a5f68ce920
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-m2crypto_0.49.0.bb
+1 -1
View File
@@ -53,6 +53,6 @@ do_install:append() {
rm -f ${D}${PYTHON_SITEPACKAGES_DIR}/M2Crypto/__pycache__/*.cpython-*.pyc
}
CVE_PRODUCT = "m2crypto"
CVE_PRODUCT = "heikkitoivonen:m2crypto m2crypto_project:m2crypto"
BBCLASSEXTEND = "native"