| Message ID | 20251230142902.730667-6-skandigraun@gmail.com |
|---|---|
| State | New |
| Headers | show |
| Series | [meta-python,01/10] python3-simplejson: set CVE_PRODUCT | expand |
diff --git a/meta-python/recipes-devtools/python/python3-tqdm_4.67.1.bb b/meta-python/recipes-devtools/python/python3-tqdm_4.67.1.bb index b04cbd4b9a..b768ede830 100644 --- a/meta-python/recipes-devtools/python/python3-tqdm_4.67.1.bb +++ b/meta-python/recipes-devtools/python/python3-tqdm_4.67.1.bb @@ -7,6 +7,8 @@ LIC_FILES_CHKSUM = "file://LICENCE;md5=42dfa9e8c616dbc295df3f58d756b2a1" SRC_URI[sha256sum] = "f8aef9c52c08c13a65f30ea34f4e5aac3fd1a34959879d7e59e63027286627f2" +CVE_PRODUCT = "tqdm" + inherit pypi python_setuptools_build_meta DEPENDS += "python3-setuptools-scm-native"
The only related CVE to this recipe is tracked using tqdm_project:tqdm CPE, so the default python:tqdm CPE doesn't match it. See relevant CVE db query: sqlite> select * from products where PRODUCT like 'tqdm'; CVE-2016-10075|tqdm_project|tqdm|4.4.1|=|| CVE-2016-10075|tqdm_project|tqdm|4.10|=|| Set the CVE_PRODUCT so it can match related CVEs. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> --- meta-python/recipes-devtools/python/python3-tqdm_4.67.1.bb | 2 ++ 1 file changed, 2 insertions(+)