mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-04-20 23:48:20 +00:00
python3-python-multipart: set CVE_PRODUCT
The default python:python_multipart CPE doesn't match relevant CVE entries, because NVD tracks the related CVEs with fastapiexpect:python-multipart CPE, and Mitre uses kludex:python-multipart for others. Set the CVE_PRODUCT accordingly. See CVE db query: sqlite> select * from products where product like '%python%multipart%'; CVE-2024-24762|fastapiexpert|python-multipart|||0.0.7|< CVE-2024-24762|fastapiexpert|python-multipart|||0.0.7|< Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
@@ -8,6 +8,7 @@ inherit pypi python_hatchling ptest-python-pytest
|
|||||||
|
|
||||||
PYPI_PACKAGE = "python_multipart"
|
PYPI_PACKAGE = "python_multipart"
|
||||||
UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
|
UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
|
||||||
|
CVE_PRODUCT = "python-multipart"
|
||||||
|
|
||||||
RDEPENDS:${PN}-ptest += " \
|
RDEPENDS:${PN}-ptest += " \
|
||||||
python3-pyyaml \
|
python3-pyyaml \
|
||||||
|
|||||||
Reference in New Issue
Block a user