From b03642e20ea8836bbffb325b711e01f86bb5c4f4 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Wed, 31 Dec 2025 08:54:33 +0100 Subject: [PATCH] python3-python-multipart: set CVE_PRODUCT The default python:python_multipart CPE doesn't match relevant CVE entries, because NVD tracks the related CVEs with fastapiexpect:python-multipart CPE, and Mitre uses kludex:python-multipart for others. Set the CVE_PRODUCT accordingly. See CVE db query: sqlite> select * from products where product like '%python%multipart%'; CVE-2024-24762|fastapiexpert|python-multipart|||0.0.7|< CVE-2024-24762|fastapiexpert|python-multipart|||0.0.7|< Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- .../recipes-devtools/python/python3-python-multipart_0.0.21.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-python/recipes-devtools/python/python3-python-multipart_0.0.21.bb b/meta-python/recipes-devtools/python/python3-python-multipart_0.0.21.bb index 29054f47a7..6fc2b69f7e 100644 --- a/meta-python/recipes-devtools/python/python3-python-multipart_0.0.21.bb +++ b/meta-python/recipes-devtools/python/python3-python-multipart_0.0.21.bb @@ -8,6 +8,7 @@ inherit pypi python_hatchling ptest-python-pytest PYPI_PACKAGE = "python_multipart" UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}" +CVE_PRODUCT = "python-multipart" RDEPENDS:${PN}-ptest += " \ python3-pyyaml \