From: Devansh Patel <[email protected]> The current inherited "u-boot-tools" identity has no vulnerability records even though this recipe builds host utilities from the U-Boot source tree, so source-aligned CVEs are missed.
Use "u-boot:u-boot" for the CNA affected-data identity and "denx:u-boot" for the NVD dictionary CPE and configuration identity. Signed-off-by: Devansh Patel <[email protected]> --- meta/recipes-bsp/u-boot/u-boot-tools_2026.07.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-bsp/u-boot/u-boot-tools_2026.07.bb b/meta/recipes-bsp/u-boot/u-boot-tools_2026.07.bb index 9e7a178310..441d25bbc9 100644 --- a/meta/recipes-bsp/u-boot/u-boot-tools_2026.07.bb +++ b/meta/recipes-bsp/u-boot/u-boot-tools_2026.07.bb @@ -1,4 +1,6 @@ require u-boot-common.inc require u-boot-tools.inc +CVE_PRODUCT = "u-boot:u-boot denx:u-boot" + SRC_URI += "file://0001-tools-mkeficapsule-Detect-GnuTLS-PKCS-11-support.patch" -- 2.35.6
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#244091): https://lists.openembedded.org/g/openembedded-core/message/244091 Mute This Topic: https://lists.openembedded.org/mt/120901049/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
