From 97363a7b77c026c349136ae4037361961dff4b83 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Tue, 30 Dec 2025 16:48:56 +0100 Subject: [PATCH] python3-marshmallow: set CVE_PRODUCT The default python:marshmallow CPE doesn't match the CVEs related to this product, as they are tracked with marshmallow_project:marshmallow CPE. See CVE db query: sqlite> select * from products where PRODUCT like 'marshmallow'; CVE-2018-17175|marshmallow_project|marshmallow|||2.15.1|< CVE-2018-17175|marshmallow_project|marshmallow|3.0|>=|3.0.0b9|< Set the CVE_PRODUCT so it matches related CVEs. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- .../recipes-devtools/python/python3-marshmallow_4.1.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb b/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb index f3a905a36c..af973b2cf9 100644 --- a/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb +++ b/meta-python/recipes-devtools/python/python3-marshmallow_4.1.2.bb @@ -8,6 +8,8 @@ LIC_FILES_CHKSUM = "\ SRC_URI[sha256sum] = "083f250643d2e75fd363f256aeb6b1af369a7513ad37647ce4a601f6966e3ba5" +CVE_PRODUCT = "marshmallow" + inherit python_flit_core pypi ptest-python-pytest RDEPENDS:${PN}-ptest += " \