From: Himanshu Jadon <[email protected]> apr is tracked in NVD under apache:portable_runtime rather than the recipe name apr. Set CVE_PRODUCT accordingly so cve-check uses the correct NVD product identity for APR.
No additional alias was found to be necessary for this recipe. Signed-off-by: Himanshu Jadon <[email protected]> Signed-off-by: Mathieu Dubois-Briand <[email protected]> (cherry picked from commit bc3803e12d4938e2de514c39bd5d0f011f883ace) Signed-off-by: Yoann Congal <[email protected]> --- meta/recipes-support/apr/apr_1.7.6.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/apr/apr_1.7.6.bb b/meta/recipes-support/apr/apr_1.7.6.bb index 8ad3756b3a0..43d5b0bf4dd 100644 --- a/meta/recipes-support/apr/apr_1.7.6.bb +++ b/meta/recipes-support/apr/apr_1.7.6.bb @@ -138,3 +138,6 @@ do_install_ptest() { } export CONFIG_SHELL = "/bin/bash" + +# Add CVE_PRODUCT to match the NVD CPE product name +CVE_PRODUCT = "apache:portable_runtime"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#236688): https://lists.openembedded.org/g/openembedded-core/message/236688 Mute This Topic: https://lists.openembedded.org/mt/119210646/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
