summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGyorgy Sarvari <skandigraun@gmail.com>2025-12-30 13:24:47 +0100
committerKhem Raj <raj.khem@gmail.com>2025-12-31 08:28:51 -0800
commit49ced801223b8f55112aea38cce14ba1cc64de03 (patch)
treec783eba973b60296e89d3adf2df0f95f74d2cd46
parente22d2a7ba6e96c1312c368b4a6448bea5b6559da (diff)
downloadmeta-openembedded-49ced801223b8f55112aea38cce14ba1cc64de03.tar.gz
python3-sqlalchemy: set CVE_PRODUCT
The default python:sqlalchemy CPE fails to match CVEs, because the CVEs are associated with sqlalchemy:sqlalchemy CPE. See CVE db query: sqlite> select * from products where PRODUCT = 'sqlalchemy'; CVE-2012-0805|sqlalchemy|sqlalchemy|||0.7.0|<= CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.0|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.0_beta1|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.0_beta2|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.0_beta3|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.1|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.2|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.3|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.4|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.5|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.6|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.6.7|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.7.0_b1|=|| CVE-2012-0805|sqlalchemy|sqlalchemy|0.7.0_b2|=|| CVE-2019-7164|sqlalchemy|sqlalchemy|||1.2.17|<= CVE-2019-7164|sqlalchemy|sqlalchemy|1.3.0_beta1|=|| CVE-2019-7164|sqlalchemy|sqlalchemy|1.3.0_beta2|=|| CVE-2019-7548|sqlalchemy|sqlalchemy|1.2.17|=|| Set the CVE_PRODUCT accordingly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
-rw-r--r--meta-python/recipes-devtools/python/python3-sqlalchemy_2.0.45.bb2
1 files changed, 2 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-sqlalchemy_2.0.45.bb b/meta-python/recipes-devtools/python/python3-sqlalchemy_2.0.45.bb
index 6c6b95ceaa..f7d8f383f2 100644
--- a/meta-python/recipes-devtools/python/python3-sqlalchemy_2.0.45.bb
+++ b/meta-python/recipes-devtools/python/python3-sqlalchemy_2.0.45.bb
@@ -21,4 +21,6 @@ RDEPENDS:${PN} += " \
21 python3-typing-extensions \ 21 python3-typing-extensions \
22" 22"
23 23
24CVE_PRODUCT = "sqlalchemy"
25
24BBCLASSEXTEND = "native nativesdk" 26BBCLASSEXTEND = "native nativesdk"