* [OE-core][PATCH] glib-2.0: correct CVE_PRODUCT mapping
@ 2026-08-24 11:01 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
0 siblings, 0 replies; only message in thread
From: Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-08-24 11:01 UTC (permalink / raw)
To: openembedded-core; +Cc: xe-linux-external
From: Devansh Patel <devanshp@cisco.com>
The current product-only mapping generates a vendor-wildcard CPE.
gnome:glib is the active NVD dictionary CPE and configuration identity,
and is also used by CNA affected-data records for the packaged GNOME
GLib source.
This changes the generated product identity. With the frozen
sbom-cve-check database, the 35-entry CVE report is unchanged, so this is
an identity correction with no CVE delta.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb | 1 +
1 file changed, 1 insertion(+)
diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb
index ef80cc47cf..f401ea9c23 100644
--- a/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb
+++ b/meta/recipes-core/glib-2.0/glib-2.0_2.88.3.bb
@@ -1,2 +1,3 @@
require glib.inc
+CVE_PRODUCT = "gnome:glib"
--
2.35.6
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-24 11:02 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-24 11:01 [OE-core][PATCH] glib-2.0: correct CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.