diff mbox series

[meta-python,scarthgap] python3-httpx: set CVE_PRODUCT

Message ID 20260812055058.1491633-1-devanshp@cisco.com
State New
Headers show
Series [meta-python,scarthgap] python3-httpx: set CVE_PRODUCT | expand

Commit Message

Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) Aug. 12, 2026, 5:50 a.m. UTC 
From: Gyorgy Sarvari <skandigraun@gmail.com>

The relevant CVEs are tracked in the CVE db with encode:httpx CPE
instead of the default python:httpx. Set CVE_PRODUCT accordingly.

See CVE db query:
sqlite> select * from products where product like '%httpx%';
CVE-2021-41945|encode|httpx|||0.23.0|<

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8627277b502bd01e0ac1d856032efe7ae049a249)
Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta-python/recipes-devtools/python/python3-httpx_0.27.0.bb | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-httpx_0.27.0.bb b/meta-python/recipes-devtools/python/python3-httpx_0.27.0.bb
index e4d3cbeee8..f16edceac1 100644
--- a/meta-python/recipes-devtools/python/python3-httpx_0.27.0.bb
+++ b/meta-python/recipes-devtools/python/python3-httpx_0.27.0.bb
@@ -7,6 +7,8 @@  inherit pypi python_hatchling
 
 SRC_URI[sha256sum] = "a0cb88a46f32dc874e04ee956e4c2764aba2aa228f650b06788ba6bda2962ab5"
 
+CVE_PRODUCT = "encode:httpx"
+
 DEPENDS += "\
     python3-hatch-fancy-pypi-readme-native \
 "