Openembedded Devel Discussions
 help / color / mirror / Atom feed
* [meta-python][PATCH] python3-simpleeval: add CVE_PRODUCT mapping
@ 2026-08-21 12:59 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
  0 siblings, 0 replies; only message in thread
From: Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-08-21 12:59 UTC (permalink / raw)
  To: openembedded-devel; +Cc: xe-linux-external

From: Devansh Patel <devanshp@cisco.com>

The current inherited "python:simpleeval" mapping is wrong for the
packaged danthedeckie SimpleEval source and misses its vulnerability
record.

Use "danthedeckie:simpleeval" for the source-aligned NVD dictionary
CPE, NVD configuration identity, and CNA affected-data identity.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
 meta-python/recipes-devtools/python/python3-simpleeval_1.0.7.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-python/recipes-devtools/python/python3-simpleeval_1.0.7.bb b/meta-python/recipes-devtools/python/python3-simpleeval_1.0.7.bb
index 5fb968edd5..a4fa42ba28 100644
--- a/meta-python/recipes-devtools/python/python3-simpleeval_1.0.7.bb
+++ b/meta-python/recipes-devtools/python/python3-simpleeval_1.0.7.bb
@@ -5,6 +5,8 @@ LIC_FILES_CHKSUM = "file://LICENCE;md5=aed013161b2a0bfa75e69eeb4e8a89e7"
 
 SRC_URI[sha256sum] = "1e10e5f9fec597814444e20c0892ed15162fa214c8a88f434b5b077cf2fef85b"
 
+CVE_PRODUCT = "danthedeckie:simpleeval"
+
 inherit pypi python_hatchling ptest-python-pytest
 
 BBCLASSEXTEND = "native nativesdk"
-- 
2.35.6


^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-21 12:59 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-21 12:59 [meta-python][PATCH] python3-simpleeval: add CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox