diff mbox series

[meta-python,09/10] python3-webargs: set CVE_PRODUCT

Message ID 20251230154903.736590-9-skandigraun@gmail.com
State New
Headers show
Series [meta-python,01/10] python-gunicorn: set CVE_PRODUCT | expand

Commit Message

Gyorgy Sarvari Dec. 30, 2025, 3:49 p.m. UTC
The relevant CVEs for this recipe are tracked using webargs_project:webargs
CPE, which makes the default python:webargs CPE to miss CVEs.

See CVE db query:
sqlite> select * from products where product like '%webargs%';
CVE-2019-9710|webargs_project|webargs|||5.1.3|<
CVE-2020-7965|webargs_project|webargs|5.0.0|>=|5.5.2|<=

Set the CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb b/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb
index 307d2436c2..606796e287 100644
--- a/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb
+++ b/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb
@@ -5,6 +5,7 @@  LIC_FILES_CHKSUM = "file://LICENSE;md5=27586b20700d7544c06933afe56f7df4"
 
 inherit pypi python_flit_core
 
+CVE_PRODUCT = "webargs"
 SRC_URI[sha256sum] = "799bf9039c76c23fd8dc1951107a75a9e561203c15d6ae8f89c1e46e234636c1"
 
 RDEPENDS:${PN} += "\