mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-08-30 00:33:19 +00:00
python3-ldap: correct python-ldap CVE_PRODUCT mapping
The current "python-ldap" mapping generates a vendor-wildcard product identity for the packaged Python binding. Use "python-ldap:python-ldap" so it matches the NVD dictionary CPE and configuration identity. The generated product identity changes, but sbom-cve-check 1.3.3 reports no CVE delta with the pinned databases. Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
@@ -29,4 +29,4 @@ RDEPENDS:${PN} = " \
|
||||
python3-unittest \
|
||||
"
|
||||
|
||||
CVE_PRODUCT = "python-ldap"
|
||||
CVE_PRODUCT = "python-ldap:python-ldap"
|
||||
|
||||
Reference in New Issue
Block a user