diff mbox series

[meta-oe,wrynose,28/42] ldns: correct CVE_PRODUCT mapping

Message ID	20260923104056.457360-28-ankur.tyagi85@gmail.com
State	New
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 74.125.228.41, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Devansh Patel <devanshp@cisco.com>, Khem Raj <khem.raj@oss.qualcomm.com>, Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][wrynose][PATCH 28/42] ldns: correct CVE_PRODUCT mapping Date: Wed, 23 Sep 2026 22:40:42 +1200 Message-ID: <20260923104056.457360-28-ankur.tyagi85@gmail.com> In-Reply-To: <20260923104056.457360-1-ankur.tyagi85@gmail.com> References: <20260923104056.457360-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,wrynose,1/42] c-ares: mark CVEs fixed \| expand [meta-oe,wrynose,1/42] c-ares: mark CVEs fixed [meta-oe,wrynose,2/42] cjose: mark CVE-2026-53938 and CVE-2026-53939 fixed [meta-oe,wrynose,3/42] cjson: patch CVE-2026-87933 [meta-oe,wrynose,4/42] colord: ignore CVE-2026-85062 [meta-oe,wrynose,5/42] flatcc: patch CVE-2026-90786 [meta-oe,wrynose,6/42] flatcc: patch CVE-2026-90785 [meta-multimedia,wrynose,7/42] fluidsynth: mark CVEs fixed [meta-oe,wrynose,8/42] freeipmi: patch CVE-2026-85509 [meta-oe,wrynose,9/42] freeipmi: patch CVE-2026-85508 [meta-oe,wrynose,10/42] freeipmi: patch CVE-2026-85507 [meta-oe,wrynose,11/42] freeipmi: patch CVE-2026-85506 [meta-oe,wrynose,12/42] freeipmi: patch CVE-2026-85505 [meta-oe,wrynose,13/42] freeipmi: patch CVE-2026-85504 [meta-multimedia,wrynose,14/42] libde265: patch CVE-2026-54240 and CVE-2026-54241 [meta-multimedia,wrynose,15/42] libheif: ignore CVE-2026-84383 [meta-oe,wrynose,16/42] libwebsockets: patch CVE-2026-19773 [meta-oe,wrynose,17/42] faad2: upgrade 2.11.2 -> 2.11.3 [meta-oe,wrynose,18/42] libmxml: upgrade 4.0.4 -> 4.0.5 [meta-networking,wrynose,19/42] nanomsg: upgrade 1.2.2 -> 1.2.4 [meta-networking,wrynose,20/42] nanomsg: upgrade 1.2.4 -> 1.2.5 [meta-multimedia,wrynose,21/42] libopenmpt: upgrade 0.8.4 -> 0.8.6 [meta-python,wrynose,22/42] python3-tzdata: Upgrade 2026.3 -> 2026.4 [meta-oe,wrynose,23/42] smarty: mark CVEs patched [meta-oe,wrynose,24/42] libssh: ignore CVE-2026-59842 [meta-networking,wrynose,25/42] ntopng: ignore CVE-2026-84989 [meta-networking,wrynose,26/42] ntopng: patch CVE-2026-84990 [meta-networking,wrynose,27/42] ntopng: patch CVE-2026-86090 and CVE-2026-86091 [meta-oe,wrynose,28/42] ldns: correct CVE_PRODUCT mapping [meta-networking,wrynose,29/42] dnsmasq: correct CVE_PRODUCT mapping [meta-oe,wrynose,30/42] jq: correct CVE_PRODUCT mapping [meta-python,wrynose,31/42] python3-twisted: correct CVE_PRODUCT mapping [meta-oe,wrynose,32/42] php: correct CVE_PRODUCT mapping [meta-python,wrynose,33/42] python3-ldap: correct python-ldap CVE_PRODUCT mapping [meta-oe,wrynose,34/42] mariadb: correct CVE_PRODUCT mapping [meta-oe,wrynose,35/42] libssh: correct CVE_PRODUCT mapping [meta-python,wrynose,36/42] python3-flask-user: correct CVE_PRODUCT mapping [meta-python,wrynose,37/42] python3-aiohttp: correct CVE_PRODUCT mapping [meta-python,wrynose,38/42] python3-werkzeug: correct CVE_PRODUCT mapping [meta-python,wrynose,39/42] python3-flask: correct CVE_PRODUCT mapping [meta-python,wrynose,40/42] python3-twitter: correct Tweepy CVE_PRODUCT mapping [meta-python,wrynose,41/42] python3-ujson: add CVE_PRODUCT mapping [meta-python,wrynose,42/42] python3-waitress: correct CVE_PRODUCT mapping

Commit Message

Ankur Tyagi Sept. 23, 2026, 10:40 a.m. UTC

From: Devansh Patel <devanshp@cisco.com>

The default product-only mapping generates a vendor-wildcard CPE.
nlnetlabs:ldns is the active NVD dictionary CPE and configuration
identity for the packaged NLnet Labs source.

This changes the generated product identity to an exact CPE, but the
frozen sbom-cve-check database leaves the eight-entry CVE report
unchanged, with no current CVE delta.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit fe530d55ef61d61e8620c45c96c0abe009d595b2)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb | 2 ++
 1 file changed, 2 insertions(+)

diff mbox series

Patch

diff --git a/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb b/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb
index 8b3b9bd9de..6e50cc2b1e 100644
--- a/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb
+++ b/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb
@@ -6,6 +6,8 @@  LIC_FILES_CHKSUM = "file://LICENSE;md5=34330f15b2b4abbbaaa7623f79a6a019"
 SRC_URI = "https://www.nlnetlabs.nl/downloads/ldns/ldns-${PV}.tar.gz"
 SRC_URI[sha256sum] = "b524fa21994b6e834200ceb8c27f1b84bda5982fe35706f058196c079db94d5d"
 
+CVE_PRODUCT = "nlnetlabs:ldns"
+
 DEPENDS = "openssl"
 
 inherit autotools-brokensep