diff mbox series

[meta-python,08/10] python3-html5lib: set CVE_PRODUCT

Message ID 20251230142902.730667-8-skandigraun@gmail.com
State New
Headers show
Series [meta-python,01/10] python3-simplejson: set CVE_PRODUCT | expand

Commit Message

Gyorgy Sarvari Dec. 30, 2025, 2:29 p.m. UTC 
There are currently 2 related CVEs in the NIST db, both of them are tracked with
html5lib:html5lib CPE, so the default python:html5lib CPE doesn't match.

See CVE db query:
sqlite> select * from products where PRODUCT like '%html5lib%';
CVE-2016-9909|html5lib|html5lib|||0.99999999|<=
CVE-2016-9910|html5lib|html5lib|||0.99999999|<=

Set the CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-html5lib_1.1.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-html5lib_1.1.bb b/meta-python/recipes-devtools/python/python3-html5lib_1.1.bb
index 94fbe0455e..8b32580d4a 100644
--- a/meta-python/recipes-devtools/python/python3-html5lib_1.1.bb
+++ b/meta-python/recipes-devtools/python/python3-html5lib_1.1.bb
@@ -13,4 +13,6 @@  RDEPENDS:${PN} += "\
     python3-xml \
 "
 
+CVE_PRODUCT = "html5lib"
+
 BBCLASSEXTEND = "native nativesdk"