The related CVEs are tracked with py7zr_project:py7zr CPE in the database,
and the default python:py7zr CPE doesn't match relevant entries.

Set CVE_PRODUCT accordingly.

See CVE db query:
sqlite> select * from products where product like '%py7zr%';
CVE-2022-44900|py7zr_project|py7zr|||0.20.1|<

Signed-off-by: Gyorgy Sarvari <[email protected]>
---
 meta-python/recipes-devtools/python/python3-py7zr_1.0.0.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-python/recipes-devtools/python/python3-py7zr_1.0.0.bb 
b/meta-python/recipes-devtools/python/python3-py7zr_1.0.0.bb
index 61a9a5569b..83482a9466 100644
--- a/meta-python/recipes-devtools/python/python3-py7zr_1.0.0.bb
+++ b/meta-python/recipes-devtools/python/python3-py7zr_1.0.0.bb
@@ -6,6 +6,8 @@ LIC_FILES_CHKSUM = 
"file://LICENSE;md5=4fbd65380cdd255951079008b364516c"
 
 SRC_URI[sha256sum] = 
"f6bfee81637c9032f6a9f0eb045a4bfc7a7ff4138becfc42d7cb89b54ffbfef1"
 
+CVE_PRODUCT = "py7zr"
+
 inherit pypi python_setuptools_build_meta
 
 DEPENDS += " \
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#123064): 
https://lists.openembedded.org/g/openembedded-devel/message/123064
Mute This Topic: https://lists.openembedded.org/mt/117009265/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to