The relevant CVE is tracked using flask-user_project:flask-user CPE,
so the default python:flask-user value doesn't match it.

Set CVE_PRODUCT accordingly.

See CVE db query:
sqlite> select * from products where product like 'flask-user';
CVE-2021-23401|flask-user_project|flask-user|-|||

Signed-off-by: Gyorgy Sarvari <[email protected]>
---
 .../recipes-devtools/python/python3-flask-user_0.6.19.bb        | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-python/recipes-devtools/python/python3-flask-user_0.6.19.bb 
b/meta-python/recipes-devtools/python/python3-flask-user_0.6.19.bb
index fadfabd0c0..68d7361519 100644
--- a/meta-python/recipes-devtools/python/python3-flask-user_0.6.19.bb
+++ b/meta-python/recipes-devtools/python/python3-flask-user_0.6.19.bb
@@ -11,6 +11,8 @@ SRC_URI[sha256sum] = 
"601abcc0343dfbae0c56273d98362d5cdc266ac84d20b3f65a212e4a2c
 PYPI_PACKAGE = "Flask-User"
 UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
 
+CVE_PRODUCT = "flask-user"
+
 inherit pypi setuptools3
 
 RDEPENDS:${PN} = " \
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#123049): 
https://lists.openembedded.org/g/openembedded-devel/message/123049
Mute This Topic: https://lists.openembedded.org/mt/117009249/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to