diff mbox series

[meta-python] python3-twisted: correct CVE_PRODUCT mapping

Message ID 20260826075347.63268-1-devanshp@cisco.com
State New
Headers show
Series [meta-python] python3-twisted: correct CVE_PRODUCT mapping | expand

Commit Message

Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) Aug. 26, 2026, 7:53 a.m. UTC 
From: Devansh Patel <devanshp@cisco.com>

The product-only "twisted" value emits a wildcard-vendor identity
instead of the active identity assigned to the packaged Twisted source.

Use "twisted:twisted" for its NVD dictionary CPE, NVD configuration,
and CNA affected-data identities. With sbom-cve-check 1.3.3 and the
pinned database snapshots, the generated product identity changes; the
current CVE report is unchanged.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb b/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb
index 7d7f5d3053..c294bd2933 100644
--- a/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb
+++ b/meta-python/recipes-devtools/python/python3-twisted_26.4.0.bb
@@ -8,7 +8,7 @@  LIC_FILES_CHKSUM = "file://LICENSE;md5=ff950f7bafa004a86f478dc9eaf8106f"
 
 SRC_URI[sha256sum] = "dbfd0fe1ee409d0243fdd7a6a6ff14f4948cec1fd78e0376291f805e1501fae9"
 
-CVE_PRODUCT = "twisted"
+CVE_PRODUCT = "twisted:twisted"
 
 inherit pypi python_hatchling