[scarthgap,09/19] python3-pyasn1: set CVE_PRODUCT

Message ID	4c2a8f74464cf3b7143bd9e978eef976aea6315e.1785277157.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.45, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 09/19] python3-pyasn1: set CVE_PRODUCT Date: Wed, 29 Jul 2026 00:21:44 +0200 Message-ID: <4c2a8f74464cf3b7143bd9e978eef976aea6315e.1785277157.git.yoann.congal@smile.fr> In-Reply-To: <cover.1785277157.git.yoann.congal@smile.fr> References: <cover.1785277157.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/19] libsolv: Fix CVE-2026-9149 \| expand [scarthgap,01/19] libsolv: Fix CVE-2026-9149 [scarthgap,02/19] package.bbclass: hardcode emit_pkgdata to run last [scarthgap,03/19] gawk: Fix CVE-2026-40467 [scarthgap,04/19] gawk: Fix CVE-2026-40468 [scarthgap,05/19] gawk: Fix CVE-2026-40469 [scarthgap,06/19] gawk: Fix CVE-2026-40553 [scarthgap,07/19] python3-cryptography: set CVE_PRODUCT [scarthgap,08/19] python3-ply: set CVE_PRODUCT [scarthgap,09/19] python3-pyasn1: set CVE_PRODUCT [scarthgap,10/19] python3-setuptools: Fix CVE-2026-59890 [scarthgap,11/19] vim: Security Fix for CVE-2026-28422 [scarthgap,12/19] vim: Security Fix for CVE-2026-42307 [scarthgap,13/19] vim: Security Fix for CVE-2026-43961 [scarthgap,14/19] vim: Security Fix for CVE-2026-47162 [scarthgap,15/19] vim: Security Fix for CVE-2026-47167 [scarthgap,16/19] sqlite3: fix CVE-2026-11822 and CVE-2026-11824 [scarthgap,17/19] curl: add annotation for CVE-2026-10536 [scarthgap,18/19] cargo-update-recipe-crates: Don't fail for partially empty Cargo.lock [scarthgap,19/19] openssh: set status for CVE-2026-59998

Message ID

4c2a8f74464cf3b7143bd9e978eef976aea6315e.1785277157.git.yoann.congal@smile.fr

State

New

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 09/19] python3-pyasn1: set CVE_PRODUCT
Date: Wed, 29 Jul 2026 00:21:44 +0200
Message-ID: 
 <4c2a8f74464cf3b7143bd9e978eef976aea6315e.1785277157.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1785277157.git.yoann.congal@smile.fr>
References: <cover.1785277157.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/19] libsolv: Fix CVE-2026-9149 | expand

Commit Message

Yoann Congal July 28, 2026, 10:21 p.m. UTC

From: mark.yang <mark.yang@lge.com>

The default python:pyasn1 does not match the NVD/CNA entries which use
pyasn1 as vendor, so CVEs like CVE-2026-30922 are never reported. Use
the exact pyasn1:pyasn1 pair.

Note: Original commit was for python3-pyasn1_0.6.3.bb. This is adjusted
for scarthgap where recipe version is python3-pyasn1_0.5.1.bb.

Suggested-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4971337840e8855740409e8f5dadb3ab3661f033)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-devtools/python/python3-pyasn1_0.5.1.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-devtools/python/python3-pyasn1_0.5.1.bb b/meta/recipes-devtools/python/python3-pyasn1_0.5.1.bb
index 0519ba5edb0..3f2d444826f 100644
--- a/meta/recipes-devtools/python/python3-pyasn1_0.5.1.bb
+++ b/meta/recipes-devtools/python/python3-pyasn1_0.5.1.bb
@@ -1,3 +1,4 @@ 
 inherit pypi setuptools3
 require python-pyasn1.inc
 
+CVE_PRODUCT = "pyasn1:pyasn1"

[scarthgap,09/19] python3-pyasn1: set CVE_PRODUCT

Commit Message

Patch