diff mbox series

[meta-python,04/10] python3-m2crypto: set CVE_PRODUCT

Message ID 20251230142902.730667-4-skandigraun@gmail.com
State New
Headers show
Series [meta-python,01/10] python3-simplejson: set CVE_PRODUCT | expand

Commit Message

Gyorgy Sarvari Dec. 30, 2025, 2:28 p.m. UTC 
NIST currently tracks CVEs under at least 2 different CPEs for this recipe,
but neither of them is python:m2crypto (the default CVE_PRODUCT).

See CVE db query:
sqlite> select * from products where PRODUCT like '%m2crypto%';
CVE-2009-0127|heikkitoivonen|m2crypto|-|||
CVE-2020-25657|m2crypto_project|m2crypto|-|||
CVE-2023-50781|m2crypto_project|m2crypto|-|||

Set the CVE_PRODUCT to match the relevant CPEs.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb b/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb
index 9aac7b344f..03b178fc8a 100644
--- a/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb
+++ b/meta-python/recipes-devtools/python/python3-m2crypto_0.46.2.bb
@@ -51,4 +51,6 @@  do_install:append() {
     rm -f ${D}${PYTHON_SITEPACKAGES_DIR}/M2Crypto/__pycache__/*.cpython-*.pyc
 }
 
+CVE_PRODUCT = "m2crypto"
+
 BBCLASSEXTEND = "native"