[OE-core][PATCH] vim-tiny: add CVE_PRODUCT mapping

["Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)" <devanshp@cisco.com>]

From: Devansh Patel <devanshp@cisco.com>

The inherited "vim-tiny" identity has no vulnerability records even
though this recipe builds the official Vim source with the tiny feature
set, so source-aligned CVEs are missed.

Use "vim_development_group:vim" for the historical NVD configuration
identity and "vim:vim" for the current NVD dictionary CPE, configuration,
and CNA affected-data identity.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta/recipes-support/vim/vim-tiny_9.2.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-support/vim/vim-tiny_9.2.bb b/meta/recipes-support/vim/vim-tiny_9.2.bb
index 1d66491433..a9759afdd5 100644
--- a/meta/recipes-support/vim/vim-tiny_9.2.bb
+++ b/meta/recipes-support/vim/vim-tiny_9.2.bb
@@ -2,6 +2,8 @@ require vim.inc
 
 SUMMARY += " (with tiny features)"
 
+CVE_PRODUCT = "vim_development_group:vim vim:vim"
+
 SRC_URI += "file://0001-Skip-sourcing-defaults.vim-when-Vim-is-invoked-as-vi.patch"
 
 PACKAGECONFIG += "tiny"
-- 
2.35.6