There is one brotli repository for all language bindings, and the same CPE is used for all: google:brotli (instead of the expected default of python:brotli, in case of the Python package).
Set the CVE_PRODUCT accordingly. See CVE db query: sqlite> select * from products where product like 'brotli'; CVE-2020-8927|google|brotli|||1.0.8|< Signed-off-by: Gyorgy Sarvari <[email protected]> --- meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb b/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb index 2f7016a546..5676d4ef97 100644 --- a/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb +++ b/meta-python/recipes-devtools/python/python3-brotli_1.1.0.bb @@ -7,6 +7,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=941ee9cd1609382f946352712a319b4b" PYPI_PACKAGE = "Brotli" UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}" +CVE_PRODUCT = "brotli" + SRC_URI[sha256sum] = "81de08ac11bcb85841e440c13611c00b67d3bf82698314928d0b676362546724" inherit pypi python_setuptools_build_meta
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#123046): https://lists.openembedded.org/g/openembedded-devel/message/123046 Mute This Topic: https://lists.openembedded.org/mt/117009246/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
