All of lore.kernel.org
 help / color / mirror / Atom feed
* [meta-virtualization][PATCH] python3-webob: add CVE_PRODUCT mapping
@ 2026-08-21  5:08 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
  2026-09-01 13:34 ` Bruce Ashfield
  0 siblings, 1 reply; 2+ messages in thread
From: Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-08-21  5:08 UTC (permalink / raw)
  To: meta-virtualization; +Cc: xe-linux-external

From: Devansh Patel <devanshp@cisco.com>

The current inherited "python:webob" mapping does not match the WebOb identities used by NVD and CVE List V5, so source-aligned CVEs are missed.

Use "pylons:webob" for the CNA affected-data identity and "pylonsproject:webob" for the NVD dictionary CPE and configuration identity.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 recipes-devtools/python/python3-webob_1.8.10.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-devtools/python/python3-webob_1.8.10.bb b/recipes-devtools/python/python3-webob_1.8.10.bb
index 6d895103..3a4e2c95 100644
--- a/recipes-devtools/python/python3-webob_1.8.10.bb
+++ b/recipes-devtools/python/python3-webob_1.8.10.bb
@@ -8,6 +8,8 @@ PYPI_PACKAGE = "webob"
 
 SRC_URI[sha256sum] = "1c963a11f307bc3f624fbab9dde737701eae255f32981b7a5486a88db1767c2b"
 
+CVE_PRODUCT = "pylons:webob pylonsproject:webob"
+
 inherit setuptools3 pypi
 
 RDEPENDS:${PN} += " \
-- 
2.35.6


^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [meta-virtualization][PATCH] python3-webob: add CVE_PRODUCT mapping
  2026-08-21  5:08 [meta-virtualization][PATCH] python3-webob: add CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
@ 2026-09-01 13:34 ` Bruce Ashfield
  0 siblings, 0 replies; 2+ messages in thread
From: Bruce Ashfield @ 2026-09-01 13:34 UTC (permalink / raw)
  To: devanshp; +Cc: meta-virtualization

merged

Bruce


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-09-01 13:34 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-21  5:08 [meta-virtualization][PATCH] python3-webob: add CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
2026-09-01 13:34 ` Bruce Ashfield

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.