diff mbox series

vim-tiny: add CVE_PRODUCT mapping

Message ID 20260824110157.25910-1-devanshp@cisco.com
State Under Review
Headers show
Series vim-tiny: add CVE_PRODUCT mapping | expand

Commit Message

Devansh Patel Aug. 24, 2026, 11:01 a.m. UTC 
From: Devansh Patel <devanshp@cisco.com>

The inherited "vim-tiny" identity has no vulnerability records even
though this recipe builds the official Vim source with the tiny feature
set, so source-aligned CVEs are missed.

Use "vim_development_group:vim" for the historical NVD configuration
identity and "vim:vim" for the current NVD dictionary CPE, configuration,
and CNA affected-data identity.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta/recipes-support/vim/vim-tiny_9.2.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-support/vim/vim-tiny_9.2.bb b/meta/recipes-support/vim/vim-tiny_9.2.bb
index 1d66491433..a9759afdd5 100644
--- a/meta/recipes-support/vim/vim-tiny_9.2.bb
+++ b/meta/recipes-support/vim/vim-tiny_9.2.bb
@@ -2,6 +2,8 @@  require vim.inc
 
 SUMMARY += " (with tiny features)"
 
+CVE_PRODUCT = "vim_development_group:vim vim:vim"
+
 SRC_URI += "file://0001-Skip-sourcing-defaults.vim-when-Vim-is-invoked-as-vi.patch"
 
 PACKAGECONFIG += "tiny"