At least one CVE is tracked by debian:matplotlib CPE (and no CVEs are
tracked by the defaul python:matplotlib CPE).

See CVE db query:
sqlite> select * from products where PRODUCT = 'matplotlib';
CVE-2013-1424|debian|matplotlib|0.99.3-1|>=|1.4.2-3.1|<

Set the CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <[email protected]>
---
 .../recipes-devtools/python/python3-matplotlib_3.10.8.bb        | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb 
b/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb
index c92af94732..ce8c7a276a 100644
--- a/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb
+++ b/meta-python/recipes-devtools/python/python3-matplotlib_3.10.8.bb
@@ -47,4 +47,6 @@ RDEPENDS:${PN} = "\
     python3-packaging \
 "
 
+CVE_PRODUCT = "matplotlib"
+
 BBCLASSEXTEND = "native"
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#123013): 
https://lists.openembedded.org/g/openembedded-devel/message/123013
Mute This Topic: https://lists.openembedded.org/mt/116996771/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to