The relevant CVEs for this recipe are tracked using webargs_project:webargs
CPE, which makes the default python:webargs CPE to miss CVEs.

See CVE db query:
sqlite> select * from products where product like '%webargs%';
CVE-2019-9710|webargs_project|webargs|||5.1.3|<
CVE-2020-7965|webargs_project|webargs|5.0.0|>=|5.5.2|<=

Set the CVE_PRODUCT accordingly.

Signed-off-by: Gyorgy Sarvari <[email protected]>
---
 meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb 
b/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb
index 307d2436c2..606796e287 100644
--- a/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb
+++ b/meta-python/recipes-devtools/python/python3-webargs_8.7.1.bb
@@ -5,6 +5,7 @@ LIC_FILES_CHKSUM = 
"file://LICENSE;md5=27586b20700d7544c06933afe56f7df4"
 
 inherit pypi python_flit_core
 
+CVE_PRODUCT = "webargs"
 SRC_URI[sha256sum] = 
"799bf9039c76c23fd8dc1951107a75a9e561203c15d6ae8f89c1e46e234636c1"
 
 RDEPENDS:${PN} += "\
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#123035): 
https://lists.openembedded.org/g/openembedded-devel/message/123035
Mute This Topic: https://lists.openembedded.org/mt/116999123/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to