From f3687ebafa0a3d97b094d5b972a9323e00345da4 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 2 Jun 2026 14:40:35 +0200 Subject: [PATCH] package/python-ecdsa: update CPE The CPE 'python-ecdsa_project:python-ecdsa' hasn't received new CVE since 2019 while 'tlsfuzzer:ecdsa' received two [1][2]. See the package CVE history at [3]. [1] https://nvd.nist.gov/vuln/detail/CVE-2026-33936 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-23342 [3] https://security-tracker.debian.org/tracker/source-package/python-ecdsa Signed-off-by: Thomas Perale Signed-off-by: Peter Korsgaard --- package/python-ecdsa/python-ecdsa.mk | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/python-ecdsa/python-ecdsa.mk b/package/python-ecdsa/python-ecdsa.mk index c94cc0512d..b1ac6fe1b8 100644 --- a/package/python-ecdsa/python-ecdsa.mk +++ b/package/python-ecdsa/python-ecdsa.mk @@ -10,6 +10,7 @@ PYTHON_ECDSA_SITE = https://files.pythonhosted.org/packages/c0/1f/924e3caae75f47 PYTHON_ECDSA_SETUP_TYPE = setuptools PYTHON_ECDSA_LICENSE = MIT PYTHON_ECDSA_LICENSE_FILES = LICENSE -PYTHON_ECDSA_CPE_ID_VALID = YES +PYTHON_ECDSA_CPE_ID_VENDOR = tlsfuzzer +PYTHON_ECDSA_CPE_ID_PRODUCT = ecdsa $(eval $(python-package))