From: Himanshu Jadon <[email protected]> apr-util is tracked in NVD under apache:apr-util, while a smaller set of newer CVEs also appears under apache:portable_runtime_utility. Set CVE_PRODUCT accordingly so cve-check can cover both the historical and current NVD product identities used for APR-util.
Signed-off-by: Himanshu Jadon <[email protected]> Signed-off-by: Mathieu Dubois-Briand <[email protected]> (cherry picked from commit 927b505c982ed7443aed348ca54b0073ac63d938) Signed-off-by: Himanshu Jadon <[email protected]> --- meta/recipes-support/apr/apr-util_1.6.3.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/apr/apr-util_1.6.3.bb b/meta/recipes-support/apr/apr-util_1.6.3.bb index 1371e262dd..3a5f52d250 100644 --- a/meta/recipes-support/apr/apr-util_1.6.3.bb +++ b/meta/recipes-support/apr/apr-util_1.6.3.bb @@ -95,3 +95,6 @@ do_install_ptest() { cp -r ${B}/test/$i $t; \ done } + +# Add CVE_PRODUCT to match the NVD CPE product name +CVE_PRODUCT = "apache:apr-util apache:portable_runtime_utility" -- 2.44.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#238048): https://lists.openembedded.org/g/openembedded-core/message/238048 Mute This Topic: https://lists.openembedded.org/mt/119611054/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
