Devansh Patel c0f1ddc31d python3-cbor2: use exact CVE_PRODUCT mapping ...

The inherited "python:cbor2" mapping does not identify the packaged
source. Use "agronholm:cbor2", its NVD dictionary CPE and NVD
configuration identity, restoring the source-aligned records.

Backport note: master replaces a product-only mapping in version 6.1.4;
Scarthgap 5.6.4 has no recipe-local override, so this is an addition.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 7f59d247ee)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-09-01 10:18:01 +05:30

..

gyp

…

python

python3-cbor2: use exact CVE_PRODUCT mapping

2026-09-01 10:18:01 +05:30

python3_oauth2client

…

python3-attrdict3

…

python3-gspread

…

python3-piccata

…

python3-reedsolo

…

python3-wxgtk4

…

python-jsonref

…