From 5908d323c2969f42dc42de430917edc1bf119670 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 2 Jun 2026 14:40:35 +0200 Subject: [PATCH] package/python-ecdsa: update CPE The CPE 'python-ecdsa_project:python-ecdsa' hasn't received new CVE since 2019 while 'tlsfuzzer:ecdsa' received two [1][2]. See the package CVE history at [3]. [1] https://nvd.nist.gov/vuln/detail/CVE-2026-33936 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-23342 [3] https://security-tracker.debian.org/tracker/source-package/python-ecdsa Signed-off-by: Thomas Perale Signed-off-by: Peter Korsgaard (cherry picked from commit f3687ebafa0a3d97b094d5b972a9323e00345da4) Signed-off-by: Thomas Perale --- package/python-ecdsa/python-ecdsa.mk | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/python-ecdsa/python-ecdsa.mk b/package/python-ecdsa/python-ecdsa.mk index 8fa2c431bc..e6f75c67b0 100644 --- a/package/python-ecdsa/python-ecdsa.mk +++ b/package/python-ecdsa/python-ecdsa.mk @@ -10,6 +10,7 @@ PYTHON_ECDSA_SITE = https://files.pythonhosted.org/packages/5e/d0/ec8ac1de7accdc PYTHON_ECDSA_SETUP_TYPE = setuptools PYTHON_ECDSA_LICENSE = MIT PYTHON_ECDSA_LICENSE_FILES = LICENSE -PYTHON_ECDSA_CPE_ID_VALID = YES +PYTHON_ECDSA_CPE_ID_VENDOR = tlsfuzzer +PYTHON_ECDSA_CPE_ID_PRODUCT = ecdsa $(eval $(python-package))