mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-09 18:50:13 +00:00
Code Issues Projects Releases Wiki Activity

python3-cbor2: use exact CVE_PRODUCT mapping

Browse Source 
The inherited "python:cbor2" mapping does not identify the packaged
source. Use "agronholm:cbor2", its NVD dictionary CPE and NVD
configuration identity, restoring the source-aligned records.

Backport note: master replaces a product-only mapping in version 6.1.4;
Scarthgap 5.6.4 has no recipe-local override, so this is an addition.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 7f59d247ee)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Devansh Patel
2026-09-01 10:18:01 +05:30
committed by Anuj Mittal
parent b7e7f9cc80
commit c0f1ddc31d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-cbor2_5.6.4.bb
+2
View File
@@ -39,4 +39,6 @@ RDEPENDS:${PN} += " \
python3-datetime \
"
CVE_PRODUCT = "agronholm:cbor2"
BBCLASSEXTEND = "native nativesdk"