mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-15 06:17:16 +00:00
python3-ldap: correct python-ldap CVE_PRODUCT mapping
The current "python-ldap" mapping generates a vendor-wildcard product
identity for the packaged Python binding.
Use "python-ldap:python-ldap" so it matches the NVD dictionary CPE and
configuration identity. The generated product identity changes, but
sbom-cve-check 1.3.3 reports no CVE delta with the pinned databases.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit ffc1c4a318)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
1 parent
c978045d53
commit
c980cdbfcf
1 file changed
+1
-1
@@ -29,4 +29,4 @@ RDEPENDS:${PN} = " \
|
||||
python3-unittest \
|
||||
"
|
||||
|
||||
CVE_PRODUCT = "python-ldap"
|
||||
CVE_PRODUCT = "python-ldap:python-ldap"
|
||||
Reference in new issue
Block a user