diff mbox series

[meta-python,07/10] python3-matplotlib: set CVE_PRODUCT

Message ID 20251230122454.721515-7-skandigraun@gmail.com
State New
Headers show
Series [meta-python,01/10] python3-tornado: set CVE_PRODUCT | expand

Commit Message

Gyorgy Sarvari Dec. 30, 2025, 12:24 p.m. UTC 
At least one CVE is tracked by debian:matplotlib CPE (and no CVEs are
tracked by the defaul python:matplotlib CPE).

See CVE db query:
sqlite> select * from products where PRODUCT = 'matplotlib';
CVE-2013-1424|debian|matplotlib|0.99.3-1|>=|1.4.2-3.1|<

Set the CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../recipes-devtools/python/python3-matplotlib_3.10.8.bb        | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb b/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb
index c92af94732..ce8c7a276a 100644
--- a/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb
+++ b/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb
@@ -47,4 +47,6 @@  RDEPENDS:${PN} = "\
     python3-packaging \
 "
 
+CVE_PRODUCT = "matplotlib"
+
 BBCLASSEXTEND = "native"