diff mbox series

[meta-python,06/34] python3-brotli: set CVE_PRODUCT

Message ID 20251231075436.771395-6-skandigraun@gmail.com
State New
Headers show
Series [meta-python,01/34] python3-pandas: set CVE_PRODUCT | expand

Commit Message

Gyorgy Sarvari Dec. 31, 2025, 7:54 a.m. UTC 
There is one brotli repository for all language bindings, and the same
CPE is used for all: google:brotli (instead of the expected default
of python:brotli, in case of the Python package).

Set the CVE_PRODUCT accordingly.

See CVE db query:
sqlite> select * from products where product like 'brotli';
CVE-2020-8927|google|brotli|||1.0.8|<

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb b/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb
index 2f7016a546..5676d4ef97 100644
--- a/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb
+++ b/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb
@@ -7,6 +7,8 @@  LIC_FILES_CHKSUM = "file://LICENSE;md5=941ee9cd1609382f946352712a319b4b"
 PYPI_PACKAGE = "Brotli"
 UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
 
+CVE_PRODUCT = "brotli"
+
 SRC_URI[sha256sum] = "81de08ac11bcb85841e440c13611c00b67d3bf82698314928d0b676362546724"
 
 inherit pypi python_setuptools_build_meta