mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-08-31 15:51:17 +00:00
Devansh Patel
33d7be4319
The current "aiohttp" mapping emits the wildcard-vendor *:aiohttp CPE instead of the exact NVD identity for the packaged aio-libs/aiohttp source. Use "aiohttp:aiohttp", which is both an NVD dictionary CPE and an NVD configuration identity. CNA affected data uses "aio-libs:aiohttp" and remains covered by scanner aliases. With sbom-cve-check 1.3.3 and the pinned 2026-08-12 data, the generated identity changes but the current CVE report does not. Signed-off-by: Devansh Patel <devanshp@cisco.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories