[scarthgap,27/37] flex: update CVE_PRODUCT

Message ID	b28a4e5fca085e9aa38af3e368af62b0cafba2f6.1787154074.git.fabien.thomas@smile.fr
State	New
Headers	show Return-Path: <fabien.thomas@smile.fr> ip: 209.85.221.43, mailfrom: fabien.thomas@smile.fr) From: Fabien Thomas <fabien.thomas@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 27/37] flex: update CVE_PRODUCT Date: Wed, 19 Aug 2026 17:56:58 +0200 Message-ID: <b28a4e5fca085e9aa38af3e368af62b0cafba2f6.1787154074.git.fabien.thomas@smile.fr> In-Reply-To: <cover.1787154074.git.fabien.thomas@smile.fr> References: <cover.1787154074.git.fabien.thomas@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/37] python3-pyopenssl: set CVE_PRODUCT \| expand [scarthgap,01/37] python3-pyopenssl: set CVE_PRODUCT [scarthgap,02/37] python3-idna: set CVE_PRODUCT [scarthgap,03/37] python3-certifi: set CVE_PRODUCT [scarthgap,04/37] python3-xmltodict: set CVE_PRODUCT [scarthgap,05/37] python3-pyyaml: set CVE_PRODUCT [scarthgap,06/37] gnutls: fix CVE-2026-3833 [scarthgap,07/37] expat: fix CVE-2026-56403 [scarthgap,08/37] expat: fix CVE-2026-56408 [scarthgap,09/37] expat: fix CVE-2026-56404 [scarthgap,10/37] expat: fix CVE-2026-56405 [scarthgap,11/37] expat: fix CVE-2026-56410 [scarthgap,12/37] expat: fix CVE-2026-56406 [scarthgap,13/37] expat: fix CVE-2026-56409 [scarthgap,14/37] expat: fix CVE-2026-56411 [scarthgap,15/37] expat: fix CVE-2026-56407 [scarthgap,16/37] expat: fix CVE-2026-56132 [scarthgap,17/37] python3: fix CVE-2026-7210 [scarthgap,18/37] python3-pip: set CVE_PRODUCT [scarthgap,19/37] libssh2: Fix CVE-2025-15661 [scarthgap,20/37] curl: fix CVE-2026-5545 [scarthgap,21/37] curl: fix CVE-2026-6253 [scarthgap,22/37] curl: fix CVE-2026-6429 [scarthgap,23/37] curl: fix CVE-2026-7168 [scarthgap,24/37] u-boot: Set CVE_PRODUCT [scarthgap,25/37] xserver-org: update CVE_PRODUCT [scarthgap,26/37] shadow: set CVE_PRODUCT [scarthgap,27/37] flex: update CVE_PRODUCT [scarthgap,28/37] sudo: set CVE_PRODUCT [scarthgap,29/37] perf: drop newt from tui build requirements [scarthgap,30/37] busybox: patch CVE-2026-38754 [scarthgap,31/37] curl: fix CVE-2026-4873 [scarthgap,32/37] libssh2: fix CVE-2026-66032 [scarthgap,33/37] libssh2: fix CVE-2026-66033 [scarthgap,34/37] libssh2: fix CVE-2026-66034 [scarthgap,35/37] libssh2: fix CVE-2026-66035 [scarthgap,36/37] libsndfile1: patch CVE-2026-37555 [scarthgap,37/37] linux-yocto/6.6: update to v6.6.147

Message ID

b28a4e5fca085e9aa38af3e368af62b0cafba2f6.1787154074.git.fabien.thomas@smile.fr

State

New

Headers

From: Fabien Thomas <fabien.thomas@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 27/37] flex: update CVE_PRODUCT
Date: Wed, 19 Aug 2026 17:56:58 +0200
Message-ID: 
 <b28a4e5fca085e9aa38af3e368af62b0cafba2f6.1787154074.git.fabien.thomas@smile.fr>
In-Reply-To: <cover.1787154074.git.fabien.thomas@smile.fr>
References: <cover.1787154074.git.fabien.thomas@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/37] python3-pyopenssl: set CVE_PRODUCT | expand

Commit Message

Fabien Thomas Aug. 19, 2026, 3:56 p.m. UTC

From: Marta Rybczynska <rybczynska@gmail.com>

NVD uses westes:flex for recent CVEs in flex, based on the GitHub repo

(From OE-Core rev: 711e2864b17db92ee1f6b9cfaaa16c7a20ec8331)

Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 8bb6aa4b4acb16c59b66aa55b33053e3e8749e72)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
---
 meta/recipes-devtools/flex/flex_2.6.4.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-devtools/flex/flex_2.6.4.bb b/meta/recipes-devtools/flex/flex_2.6.4.bb
index 52543b6e021..e424aa58e8f 100644
--- a/meta/recipes-devtools/flex/flex_2.6.4.bb
+++ b/meta/recipes-devtools/flex/flex_2.6.4.bb
@@ -83,4 +83,4 @@  do_install_ptest() {
 do_install_ptest[vardepsexclude] += "UNINATIVE_LOADER"
 
 # Not Apache Flex, or Adobe Flex, or IBM Flex.
-CVE_PRODUCT = "flex_project:flex"
+CVE_PRODUCT = "flex_project:flex westes:flex"

[scarthgap,27/37] flex: update CVE_PRODUCT

Commit Message

Patch