[meta-virtualization][PATCH] python3-webob: add CVE_PRODUCT mapping
"Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]>
| Newsgroups | org.yoctoproject.lists.meta-virtualization |
|---|---|
| Message-ID | <[email protected]> |
From: Devansh Patel <[email protected]> The current inherited "python:webob" mapping does not match the WebOb identities used by NVD and CVE List V5, so source-aligned CVEs are missed. Use "pylons:webob" for the CNA affected-data identity and "pylonsproject:webob" for the NVD dictionary CPE and configuration identity. Signed-off-by: Devansh Patel <[email protected]> --- recipes-devtools/python/python3-webob_1.8.10.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-devtools/python/python3-webob_1.8.10.bb b/recipes-devtools/python/python3-webob_1.8.10.bb index 6d895103..3a4e2c95 100644 --- a/recipes-devtools/python/python3-webob_1.8.10.bb +++ b/recipes-devtools/python/python3-webob_1.8.10.bb @@ -8,6 +8,8 @@ PYPI_PACKAGE = "webob" SRC_URI[sha256sum] = "1c963a11f307bc3f624fbab9dde737701eae255f32981b7a5486a88db1767c2b" +CVE_PRODUCT = "pylons:webob pylonsproject:webob" + inherit setuptools3 pypi RDEPENDS:${PN} += " \ -- 2.35.6