diff mbox series

glib-2.0: correct CVE_PRODUCT mapping

Message ID 20260824110157.25841-1-devanshp@cisco.com
State Under Review
Headers show
Series glib-2.0: correct CVE_PRODUCT mapping | expand

Commit Message

Devansh Patel Aug. 24, 2026, 11:01 a.m. UTC 
From: Devansh Patel <devanshp@cisco.com>

The current product-only mapping generates a vendor-wildcard CPE.
gnome:glib is the active NVD dictionary CPE and configuration identity,
and is also used by CNA affected-data records for the packaged GNOME
GLib source.

This changes the generated product identity. With the frozen
sbom-cve-check database, the 35-entry CVE report is unchanged, so this is
an identity correction with no CVE delta.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb
index ef80cc47cf..f401ea9c23 100644
--- a/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb
+++ b/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb
@@ -1,2 +1,3 @@ 
 require glib.inc
 
+CVE_PRODUCT = "gnome:glib"