diff mbox series

python3-mako: correct CVE_PRODUCT mapping

Message ID 20260820102957.21693-1-devanshp@cisco.com
State New
Headers show
Series python3-mako: correct CVE_PRODUCT mapping | expand

Commit Message

Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) Aug. 20, 2026, 10:29 a.m. UTC 
From: Devansh Patel <devanshp@cisco.com>

The inherited "python:mako" mapping is not used for the packaged Mako
source and causes its vulnerability records to be missed.

Use "makotemplates:mako" for its historical NVD configuration identity
and "sqlalchemy:mako" for the current NVD dictionary CPE, NVD
configuration, and CNA affected-data identity.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta/recipes-devtools/python/python3-mako_1.4.1.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-mako_1.4.1.bb b/meta/recipes-devtools/python/python3-mako_1.4.1.bb
index 7ab2000c8f..fb989cb21c 100644
--- a/meta/recipes-devtools/python/python3-mako_1.4.1.bb
+++ b/meta/recipes-devtools/python/python3-mako_1.4.1.bb
@@ -10,6 +10,8 @@  inherit pypi python_setuptools_build_meta ptest-python-pytest
 
 SRC_URI[sha256sum] = "d7904710b662996425a21627710c4777c45053146942cf8a7aebf757c92b8c27"
 
+CVE_PRODUCT = "makotemplates:mako sqlalchemy:mako"
+
 DEPENDS += "python3-wheel-native"
 
 RDEPENDS:${PN} = "python3-html \