diff mbox series

[meta-python,wrynose,14/20] python3-httplib2: correct CVE_PRODUCT mapping

Message ID 20260823115158.1582363-14-ankur.tyagi85@gmail.com
State New
Headers show
Series [meta-oe,wrynose,1/20] thin-provisioning-tools: upgrade 1.3.1 -> 1.3.3 | expand

Commit Message

Ankur Tyagi Aug. 23, 2026, 11:51 a.m. UTC 
From: Devansh Patel <devanshp@cisco.com>

The current product-only "httplib2" mapping generates a wildcard-vendor
product identity instead of the vendor assigned to the packaged project.

Use "httplib2_project:httplib2" for its exact NVD dictionary CPE and NVD
configuration identity. This changes the generated CPE, but sbom-cve-check
1.3.3 with the pinned NVD database snapshot has no current CVE report delta.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 0a8f71a6432ff4990d11fba839bf15697bc4553b)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-python/recipes-devtools/python/python3-httplib2_0.31.2.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-httplib2_0.31.2.bb b/meta-python/recipes-devtools/python/python3-httplib2_0.31.2.bb
index 073818a7f9..5efdb8eb1b 100644
--- a/meta-python/recipes-devtools/python/python3-httplib2_0.31.2.bb
+++ b/meta-python/recipes-devtools/python/python3-httplib2_0.31.2.bb
@@ -14,4 +14,4 @@  RDEPENDS:${PN} += "\
     python3-pyparsing \
 "
 
-CVE_PRODUCT = "httplib2"
+CVE_PRODUCT = "httplib2_project:httplib2"