From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][dunfell 04/11] pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE
Date: Sat, 20 May 2023 06:05:00 -1000 [thread overview]
Message-ID: <1c37b96cd4fdfad21bf24b8b883e371c3bca56de.1684598568.git.steve@sakoman.com> (raw)
In-Reply-To: <cover.1684598568.git.steve@sakoman.com>
From: Alex Kiernan <alex.kiernan@gmail.com>
The CVE product name for PyPI packages is (usually) the same as the PyPI
package name (and not our recipe name), so use that as the default.
Signed-off-by: Alex Kiernan <alexk@zuma.ai>
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 61f6b0ad09bf87cdc2d3f08770b7c44cad1d0e58)
Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
meta/classes/pypi.bbclass | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta/classes/pypi.bbclass b/meta/classes/pypi.bbclass
index 87b4c85fc0..c68367449a 100644
--- a/meta/classes/pypi.bbclass
+++ b/meta/classes/pypi.bbclass
@@ -24,3 +24,5 @@ S = "${WORKDIR}/${PYPI_PACKAGE}-${PV}"
UPSTREAM_CHECK_URI ?= "https://pypi.org/project/${PYPI_PACKAGE}/"
UPSTREAM_CHECK_REGEX ?= "/${PYPI_PACKAGE}/(?P<pver>(\d+[\.\-_]*)+)/"
+
+CVE_PRODUCT ?= "python:${PYPI_PACKAGE}"
--
2.34.1
next prev parent reply other threads:[~2023-05-20 16:05 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-05-20 16:04 [OE-core][dunfell 00/11] Patch review Steve Sakoman
2023-05-20 16:04 ` [OE-core][dunfell 01/11] git: fix CVE-2023-29007 Steve Sakoman
2023-05-20 16:04 ` [OE-core][dunfell 02/11] git: fix CVE-2023-25652 Steve Sakoman
2023-05-20 16:04 ` [OE-core][dunfell 03/11] curl: ammend fix for CVE-2023-27534 to fix error when ssh is enabled Steve Sakoman
2023-05-20 16:05 ` Steve Sakoman [this message]
2023-05-20 16:05 ` [OE-core][dunfell 05/11] linux-firmware: upgrade 20230210 -> 20230404 Steve Sakoman
2023-05-20 16:05 ` [OE-core][dunfell 06/11] cpio: Fix wrong CRC with ASCII CRC for large files Steve Sakoman
2023-05-20 16:05 ` [OE-core][dunfell 07/11] perf: Depend on native setuptools3 Steve Sakoman
2023-05-20 16:05 ` [OE-core][dunfell 08/11] wic/bootimg-efi: if fixed-size is set then use that for mkdosfs Steve Sakoman
2023-05-20 16:05 ` [OE-core][dunfell 09/11] populate_sdk_ext.bbclass: set METADATA_REVISION with an DISTRO override Steve Sakoman
2023-05-20 16:05 ` [OE-core][dunfell 10/11] oeqa/utils/metadata.py: Fix running oe-selftest running with no distro set Steve Sakoman
2023-05-20 16:05 ` [OE-core][dunfell 11/11] selftest: skip virgl test on ubuntu 22.10, fedora 37, and all rocky Steve Sakoman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1c37b96cd4fdfad21bf24b8b883e371c3bca56de.1684598568.git.steve@sakoman.com \
--to=steve@sakoman.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox